Asia-Pacific landscape
APAC context for the vulnerability corpus: ISO/IEC 27001 is the control baseline (switch region in the header to see ISO controls on every CVE), plus the region's incident-reporting law, the JPCERT/CC advisory stream, and where to report. JPCERT/CC is our one live APAC feed; the rest is curated.
Last updated: 23 August 2026 00:24 UTC
Incident-reporting law by jurisdiction
Our plain-language summary — verify against the linked authority before relying on it.
| Jurisdiction | Regime & requirement | Authority |
|---|---|---|
| 🇯🇵 Japan | APPI (Act on the Protection of Personal Information) Report qualifying personal-data breaches to the PPC promptly; sector incident guidance via METI and JPCERT/CC. | Personal Information Protection Commission (PPC) |
| 🇦🇺 Australia | Security of Critical Infrastructure Act (SOCI) Critical-infrastructure operators must report cyber incidents to ASD/ACSC — 12 hours for a significant impact, 72 hours for a relevant impact. | Australian Signals Directorate / ACSC |
| 🇸🇬 Singapore | Cybersecurity Act 2018 + PDPA Critical-information-infrastructure owners report incidents to CSA; PDPA requires notifiable data breaches be reported to the PDPC within 72 hours. | Cyber Security Agency of Singapore (CSA) |
| 🇮🇳 India | CERT-In Directions (2022) Report specified cyber incidents to CERT-In within 6 hours of detection; retain logs for 180 days. | Indian Computer Emergency Response Team (CERT-In) |
| 🇰🇷 South Korea | PIPA / Network Act Notify affected users and the PIPC/KISA of personal-data breaches without undue delay. | Personal Information Protection Commission / KISA |
JPCERT/CC advisories
APAC response teams
- 🇯🇵 JPCERT/CC — JPCERT Coordination Center
- 🇦🇺 ACSC — Australian Cyber Security Centre
- 🇮🇳 CERT-In — Indian Computer Emergency Response Team
- 🇸🇬 CSA / SingCERT — Cyber Security Agency of Singapore / SingCERT
- 🇰🇷 KrCERT/CC — Korea Internet & Security Agency
- 🇳🇿 CERT NZ — CERT New Zealand
- 🇭🇰 HKCERT — Hong Kong CERT Coordination Centre
- 🇹🇼 TWCERT/CC — Taiwan Computer Emergency Response Team
Reports
- ACSC Annual Cyber Threat Report (Australia)
- JPCERT/CC Activities & Incident reports (Japan)
- ENISA Threat Landscape (global context) (EU/global)