“JP-US-EU Industrial Control Systems Cybersecurity Week for the Indo-Pacific Region” was held in FY2025

The Industrial Cyber Security Center of Excellence (ICSCoE) under the Information-technology Promotion Agency, Japan (IPA) and the Ministry of Economy, Trade and Industry (METI), in collaboration with the government of the United States (Department of Homeland Security/ Cybersecurity and Infrastructure Security Agency [DHS/CISA] and Department of State [DOS]) and the European Commission (Directorate-General for Communications, Networks, Content and Technology [DG CONNECT/ENISA, EEAS]), hosted the JP-US-EU Industrial Control Systems Cybersecurity Week (November 18–21, 2025) in Tokyo.

Nearly 200 practitioners from industry and government agencies across the Indo-Pacific region(ASEAN member states, India, Bangladesh, Sri Lanka, Mongolia and Taiwan)—about 70 participants onsite in Japan and around 130 attending via live streaming—took part in hands-on exercises, the sector-specific workshop, and seminars led by experts.

1. Outline of the event

The ICSCoE and METI hosted the JP-US-EU Industrial Control Systems Cybersecurity Week in collaboration with the US government (DHS/CISA, DOS) as well as the European Commission (DG CONNECT/ENISA, EEAS) from November 18 to 21, 2025.

Cybersecurity measures are more effective when implemented jointly by several organizations or countries. To combat the growing threats stemming from increased digitization and interconnectedness, the geopolitical importance of cybersecurity and cooperation among like-minded countries cannot be overstated. The Cybersecurity Week was first launched in 2018 by Japan in collaboration with the U.S. with the aims of enhancing cybersecurity capacity within the Indo-Pacific region and reinforcing collaboration with respective countries. Recognizing its value, the European Union (EU) officially joined this annual ICS cybersecurity exercise from 2021 onwards.

The ICS Cybersecurity Week hosts participants from the Indo-Pacific region who are information and operational cybersecurity experts from critical infrastructure operators, cybersecurity experts from national computer security incident response teams (CSIRTs), and policy experts from relevant ministries and authorities.

This year, in order to maximize efforts to strengthen supply chain resilience among Japan, the United States, and the EU, as well as to enhance capacity building in the Indo-Pacific region, the scale of the exercise was significantly expanded—resulting in approximately five times more participants compared to last year when including remote attendees. We conducted industry-specific workshops using virtual scenarios that incorporate industry-specific risks and case studies, as well as hands-on exercises on cyberattacks utilizing AI in the industrial control sector. Additionally, as a new program, the European Union Agency for Cybersecurity (ENISA) hosted workshops. Furthermore, seminars were organized with experts from Japan, the U.S., and the EU, as well as representatives from critical infrastructure companies. Through this event, participants were able to acquire knowledge, enhance their thinking on cybersecurity policy and tangibly improve their cybersecurity capabilities.

The program also contributed to establishing a common understanding on ICS cybersecurity and strengthening relationships between the Indo-Pacific region and Japan, the U.S. and the EU, which will become a foundation for further international cooperation in jointly addressing growing cybersecurity threats. Under the vision of a Free and Open Indo-Pacific, METI and the ICSCoE will continuously endeavor to enhance the cybersecurity capacity of the whole region, in particular by reinforcing measures for critical infrastructure.

2. Training program

• Program, names of speakers(PDF:124 KB)

Opening remarks from Japan, the U.S. and the EU

Keynote speeches

Workshop (Sector-specific discussions)

Using virtual scenarios that incorporate industry-specific risks, case studies, and security/safety requirements, participants engaged in group discussions simulating cyberattacks. They had an opportunity to learn practically how to address cyber risks faced by businesses and organizations.

Hands-on Training

Considering the rapid adoption of AI technology in industrial control systems, participants were introduced to case studies of AI applications using a simple robotic arm and demonstrated real-time cyberattacks against the arm. Additionally, participants acquired knowledge of XAI (Explainable AI), an emerging solution to risks posed by AI, as well as the importance of AI governance.

• Press release for an overview of the program from the Ministry of Economy, Trade and Industry (open in new window).