From Water Festivals to Firewall Festivals: Thailand's Safer Songkran Initiative Goes Digital

In a bold move to fortify Thailand's digital perimeter, the National Cyber Security Agency (NCSA) has inked a strategic pact with Google Cloud to deploy an AI-powered cyber defense architecture across the nation's government infrastructure. The announcement, made on April 2 during the country's Safer Songkran initiative, represents a significant escalation in Thailand's cybersecurity posture as it races to secure its digital transformation trajectory.

“This collaboration will involve NCSA joining forces with Google Cloud, leveraging its industry-leading security operations expertise to develop cutting-edge, national-level solutions that enhance our country’s cyber resilience,” said Prasert Jantararuangtong, Thailand’s Deputy Prime Minister and Minister of Digital Economy and Society.

The collaboration comes amid surging cyber threats across Southeast Asia and leverages Google Cloud's Cybershield platform to create centralized monitoring capabilities for Thailand's Computer Emergency Response Team (ThaiCERT). This neural-network-like approach allows for real-time threat detection and response coordination across public sector assets and critical infrastructure.

Significantly, the partnership introduces three critical technical vectors:

First, Google Cloud's threat intelligence assets — including Mandiant's frontline intelligence and VirusTotal's extensive threat database — will be integrated into Thailand's defense operations, enabling Thai security teams to recognize and counter advanced persistent threats with unprecedented speed.

Second, Mandiant consultants will deliver specialized training to government security professionals in technical domains, including incident response protocols, digital forensics methodologies, and malware analysis techniques. These effectively create a force-multiplier effect for Thailand's cybersecurity talent pool.

Third, Google Cloud Web Risk APIs will be woven into government security workflows, leveraging the same AI models that power Google Safe Browsing. These systems scan more than 10 billion URLs daily to identify malicious content, with blocklist updates propagating across five billion devices “within minutes” — a quantum leap for Thailand's ability to shield citizens from phishing and scam websites.

The initiative builds upon earlier successes. Since 2024, Google Play Protect's anti-scam feature has blocked over 6.6 million installation attempts of potentially malicious applications on 1.4 million Android devices across Thailand.

Google has further hardened its mobile security posture with a technical countermeasure against social engineering attacks: disabling the ability to turn off Play Protect's app scanning during phone calls and voice/video communications in third-party apps. This improved defense directly targets cybercriminals who try to manipulate users into disabling security features during live conversations.

“Building on these initiatives, our partnership with Google Cloud will be a significant force multiplier," explained Amorn Chomchoey, Secretary General of Thailand’s NCSA. “Best-in-class capabilities like Google Cloud Cybershield will augment our existing solutions while Mandiant will serve as an extension of our expert teams. Collectively, this will reinforce our capacity to stay ahead of future cyber threats and maintain a safe digital space for all Thais.”

The partnership follows a January 2025 meeting between Prime Minister Paetongtarn Shinawatra and Google Cloud's Asia Pacific leadership, reflecting Thailand's strategic prioritization of cybersecurity at the highest levels of government.

Bottom line

For Thailand's CISOs and data leaders, this collaboration represents a paradigm shift in the nation's security architecture. As Thailand's digital economy accelerates toward a projected USD100 billion valuation by 2030 (from USD46 billion in 2024), this security infrastructure becomes crucial national scaffolding.

The implementation of enterprise-grade security operations capabilities at a national scale creates a force-multiplication effect that individual organizations could never achieve independently. By deploying Google's AI-driven security operations across government systems, Thailand is effectively creating a nationwide security operations center with threat intelligence capabilities typically reserved for Fortune 500 companies.

The technical sophistication of this approach — combining real-time monitoring, AI-powered analytics, and human expertise — positions Thailand as a regional cybersecurity pacesetter in Southeast Asia, potentially establishing a security blueprint that neighboring nations may follow as the region continues its rapid digital transformation.

Image credit: iStockphoto/hwannaa