Thai Cybersecurity MSSP and Critical Information Infrastructure Act
Thai cybersecurity market spans Managed Security Service Provider (MSSP) operators (G-Able, AIS Cyber Hawk, NTT Data, IBM, Accenture), in-house SOC builds (Big-4 banks, telcos, energy), and Critical Information Infrastructure (CII) Act 2019 compliance. NCSA (National Cyber Security Agency) administers CII Act; sectors: finance, telco, energy, transport, government. PDPA, CII overlap drives bank/insurer compliance spend.
Key takeaways
- 1
Thai cybersecurity: MSSP (G-Able, AIS Cyber Hawk, NTT, IBM, Accenture), in-house SOC (banks, telcos, energy), CII Act compliance.
- 2
CII Act 2019 covers finance, telco, energy, transport, government; NCSA administers.
- 3
PDPA, CII Act overlap drives bank/insurer compliance spend.
- 4
Big-4 banks (BBL/KBANK/SCB/KTB/BAY) operate in-house SOC; telco AIS, True same.
- 5
- 6
Skills shortage parallels AI-talent constraint; foreign-talent inflow via Smart Visa.
Questions this report answers
What's the CII Act framework? Per NCSA: Critical Information Infrastructure Act 2019 covers finance, telecommunications, energy, transport, government services. NCSA-administered with sector-specific delegated regulators (BOT for banks, NBTC for telco, ERC for energy). Mandates incident reporting, security audits, minimum-security-controls. Sector designations expanding 2026-2028.[]
Who runs the MSSP layer? Per G-Able and AIS Cyber Hawk disclosures: G-Able (Thai-listed IT services) is structural mid-market MSSP provider. AIS Cyber Hawk (telco-affiliated) serves enterprise, telco-customer SOC outsourcing. NTT Data Thailand, IBM, Accenture, Deloitte handle larger-enterprise contracts.[, ]
Who runs in-house SOC? Per BOT supervisory framework: Big-4 Thai banks (BBL, KBANK, SCB, KTB) plus BAY operate in-house SOC under BOT cyber-risk guidelines. Telco AIS and True same. Energy: PTT group, EGAT. Selected manufacturing: SCG, CP group. In-house SOC build is structural compliance-driven spend.[]
What's the talent and incident picture? Skills shortage: SOC analyst /month (junior to senior), CISO/CSO +/month. Foreign-talent inflow via Smart Visa Talent (T) category. Ransomware incidents at Thai banks, hospitals, government rising 2024-2025; NCSA reporting framework operational. Watch incident frequency as 2026-2028 indicator.[]
Executive summary
Thai cybersecurity: MSSP (G-Able, AIS Cyber Hawk, NTT, IBM, Accenture), in-house SOC (Big-4 banks, telcos, energy), CII Act 2019 compliance. NCSA administers.[]
CII Act sectors: finance, telco, energy, transport, government. PDPA, CII Act overlap drives compliance spend. SOC analyst /month; CISO/CSO +.[, ]
Skills shortage parallels AI-talent. Ransomware incidents rising 2024-2025. Watch NCSA enforcement cadence and incident frequency as 2026-2028 indicators.[]
Thai cybersecurity market structure
CII Act framework
Value
NCSA-administered (2019)
Notes
Finance, telco, energy, transport, government.
MSSP leaders
Value
G-Able, AIS Cyber Hawk, NTT, IBM
Notes
Mid-market to enterprise.
SOC analyst salary
Value
$1.74-150k/month
Notes
Junior to senior.
CISO/CSO salary
Value
$7.25-500k+/month
Notes
C-level.
Foreign-talent path
Value
Smart Visa T
Notes
$2,899/month threshold.
| Metric | Value | Notes |
|---|---|---|
| CII Act framework | NCSA-administered (2019) | Finance, telco, energy, transport, government. |
| MSSP leaders | G-Able, AIS Cyber Hawk, NTT, IBM | Mid-market to enterprise. |
| In-house SOC | Big-4 banks, AIS, True, PTT, EGAT | Compliance-driven build. |
| SOC analyst salary | $1.74-150k/month | Junior to senior. |
| CISO/CSO salary | $7.25-500k+/month | C-level. |
| Foreign-talent path | Smart Visa T | $2,899/month threshold. |
Analyst framing
Why this report matters
Unlock the full report
Need more than the web report? Ask for a scoped export or source appendix.
Every report keeps visible citations and source metadata. Terms.
Related reports
Thailand Cybersecurity Market Intelligence
Thailand cybersecurity market grew to ~THB 18B in FY2024 driven by PDPA, Cybersecurity Act 2019 enforcement. Telecom-led enterprise services (AIS Secure Net, True Digital, NT), Thai specialists (G-Able, ACIS, Cyber Elite), MNC tech vendors (Palo Alto, Fortinet, CrowdStrike) with Thai channel partners.
Open report β
Thailand Cybersecurity & Information Security Market Intelligence
Thai information-security end-user spend reached approximately THB 18.4B in 2025 (Gartner), up roughly 12% YoY, driven by PDPA 2019 enforcement, the Cybersecurity Act 2019 critical-information-infrastructure regime under NCSA, BoT cyber-resilience and AI-risk rules, and a 240% jump in nation-state campaigns. Listed Thai system integrators G-Able and MFEC anchor the local SI, MSSP and 24x7 SOC layer; AIS Cyber Hawk, NT and True bundle telco-grade security; global vendors Palo Alto Networks, Fortinet, Trend Micro and CrowdStrike ship platforms through Thai channel partners. Report maps spend, operator concentration, regulatory roadmap (CII designation, BoT Notification 4/2568, SEC disclosure expectations) and post-quantum readiness through 2031.
Open report β
Thailand AI Talent Supply: VISTEC, Mahidol, Chula and Salary Bands 2026
Thai AI talent supply has matured 2020-2026 from a thin academic-research base to a structurally limited but visible commercial-talent pool. Universities producing AI/ML talent: VISTEC (Vidyasirimedhi Institute of Science and Technology, premier Thai-NLP and ML research; produced WangchanBERTa, ThaiSum, PyThaiNLP); AIT (Asian Institute of Technology, regional ML programme); Mahidol University (CSIM, biomedical ML); Chulalongkorn University (CP, deep learning research); KMUTT (King Mongkut's University of Technology Thonburi, robotics, ML); NSTDA NECTEC programmes. 2026 commercial salary bands (Bangkok, full-time, exclusive of bonus): ML engineer THB 80-180k/month (junior 80-110, mid 110-150, senior 150-180); data scientist THB 70-150k/month; AI research scientist THB 150-300k/month; CTO / AI-lead THB 250-500k+/month. Foreign-talent inflow via Smart Visa Talent (T) category at THB 100k/month threshold and LTR highly-skilled-professional category at USD 80k/year threshold. Thai-domestic talent pool remains shallow; SCB10X (Typhoon foundation model), AIS (Lanta), KBANK (KFin AI), Krungthai (KrungtaiNext), Bualuang (Bualuang AI Lab) lead corporate AI hiring. Looloo, iApp, AIYA, Bot Wisdom Asia (Thai-NLP startups) compete for the same talent pool.
Open report β
Thailand Cybersecurity, SOC, MDR Deep Dive
Deep-dive into Thai cybersecurity market ~THB 18-25B FY2024. Categories: managed security services (MSSP, SOC, MDR) ~32%, endpoint, network, email security ~26%, identity, access management, IAM, NDID ~14%, cloud security, CASB, CSPM ~12%, data security, DLP, encryption ~8%, GRC, compliance, audit ~8%. Operators: AIS Cyber, KBTG, SCB Tech, True Cyber, selective Thai SOC. Foreign vendor: Palo Alto, Fortinet, CrowdStrike, Cisco, Microsoft, Splunk, IBM, Trend Micro, Check Point. Thai PDPA, Cybersecurity Act, ETDA, NDID identity drive demand.
Open report β