Applications Open for the 2026 ASEAN-Japan SME Cybersecurity and Market Expansion Programme 

The ASEAN–Japan Centre (AJC) and the ASEAN Business Advisory Council (ASEAN-BAC), invite growth-oriented small and medium-sized enterprises from ASEAN Member States to participate in the ASEAN-Japan SME Cybersecurity and Cross-Border Market Expansion Workshop. 

Designed for export-oriented digital SMEs seeking to enter, expand, or strengthen their engagement with the Japanese market, this pilot programme combines practical learning, digital-readiness assessment, expert guidance, networking, and business-mentoring opportunities. 

Participants will develop a clearer understanding of the cybersecurity, digital governance, data-management, and market-readiness expectations relevant to cross-border operations between ASEAN member states and Japan. The programme will also provide participating SMEs with opportunities to share the practical challenges they face, helping inform future ASEAN–Japan cooperation and SME-support initiatives. 

Programme at a Glance 

*The detailed schedule and delivery arrangements will be communicated to selected participants. 

Why Participate? 

1. Strengthen your cybersecurity readiness 
   Learn practical approaches to managing cyber risks, protecting customer and transaction data, and developing secure digital operations appropriate for an SME. 

2. Better understand the Japanese market 
   Gain insights into Japan’s digital business environment, business practices, data-governance expectations, and requirements for building trusted cross-border partnerships. 

3. Develop a market-entry strategy 
   Explore how digital tools, cybersecurity, data management, and artificial intelligence can support your go-to-market strategy and business expansion. 

4. Assess your company’s readiness 
   Use programme diagnostics and self-assessment tools to identify gaps in your digital infrastructure, cybersecurity practices, data management, and cross-border operational readiness. 

5. Connect with experts and potential partners 
   Engage with business professionals, technical specialists, SME-support organizations, and members of the ASEAN–Japan business ecosystem. 

6. Access advanced mentoring opportunities 
   Selected participants progressing to Phase 2 will receive additional mentoring, co-creation support, peer networking, and possible structured engagement with Japanese companies. 

Who Should Apply? 

The programme is intended for export-oriented and digitally active SMEs from ASEAN Member States that are part of ASEAN-Japan Centre’s contributing members, which are Brunei Darussalam, Cambodia, Indonesia, Lao PDR, Malaysia, Myanmar, Philippines, Singapore, Thailand, Viet Nam. 

Eligible applicants should meet at least two of the following criteria: 

• SME selling through e-commerce platforms, business-to-business (B2B) digital channels, or using digital tools as a central part of its operations. 
• SME handling customer, business, or transaction data as part of its cross-border activities. 
• SME has experienced cybersecurity, compliance, data-management, or trust-related challenges when engaging with overseas markets. 
• SME has established digital operations and a demonstrated interest in entering or expanding within the Japan market. 

Applications are particularly encouraged from: 

• SME and/or startup founders; 
• SME Chief executive officers, chief technology officers, and managing directors; 
• Senior managers and/or digital leads responsible for digital strategy, business development, information technology, operations, or overseas expansion; and 
• Decision-makers who are able to apply the programme’s lessons within their organizations. 

Applicants are not required to be cybersecurity specialists. However, they should have sufficient knowledge of their company’s operations and the authority to contribute to business or digital-strategy decisions. 

Programme Structure 

Phase 1: Online Workshop 

Up to 50 selected SME participants from the 10 ASEAN member states will take part in a combination of live online sessions and self-paced online learning. 

The workshop curriculum includes: 

• Navigating the ASEAN and Japanese digital business landscapes; 
• Developing go-to-market strategies for Japan; 
• Building resilient and scalable digital infrastructure; 
• Cybersecurity and digital-risk management for SMEs; 
• Data governance and responsible use of customer information; 
• Cross-border data sharing and first-party data management; 
• Practical AI applications and AI readiness for business growth; 
• Trade and regulatory considerations for market expansion; and 
• ASEAN–Japan co-innovation and networking. 

Participants are expected to complete 2 core and 2 optional modules to complete the program and earn a certificate. The final selection of optional modules will be informed by a pre-programme diagnostic survey so that the training responds directly to participating SMEs’ needs. 

Phase 2: Networking, Mentoring and Co-Creation 

Participants who meet the required readiness criteria following Phase 1 may be invited to advance to Phase 2. 

Activities may include: 

• Individual or group mentoring; 
• Guided company-readiness assessments; 
• Peer learning and co-creation; 
• Preparation of company profiles and partnership proposals; 
• Engagement with Japanese business and technical experts; and 
• Structured business-matching sessions with potential Japanese counterparts. 

Advancement to Phase 2 will be based on the programme readiness assessment and does not guarantee a commercial partnership or business-matching outcome. 

Programme Timeline 

• 23 July–21 August 2026 – Application and Pre-Programme Diagnostic 

Applicants complete the application and provide information about their company’s digital operations, cybersecurity practices, market-expansion objectives, and current business challenges. 

• 25 September 2026 – Hybrid Programme Kick-Off 

The organizers will introduce the programme, present preliminary findings from the SME diagnostic, and explain the learning and assessment process. 

• September 26, and October 3, 10, 17 2026 – Phase 1: Online Workshops 

Participants complete the required live (2-3 hours) and self-paced modules, applied exercises, and programme activities. 

• October 24, 31, and November 7 2026 – Phase 2: Networking and Mentoring 

Eligible participants advance to mentoring, co-creation, and business-mentoring activities. 

All programme training and networking activities are expected to be completed by the end of November 2026. 

Assessment and Certification 

Participant progress will be assessed through: 

• The mandatory pre-programme diagnostic survey; 
• Attendance and participation in all required programme activities; 
• Applied exercises and discussions; 
• A readiness assessment for advancement to Phase 2; and 
• A post-programme graduation assessment. 

To qualify for a Certificate of Completion jointly issued by ASEAN-BAC and AJC, participants must: 

1. Complete at least two mandatory core modules; 
2. Complete at least two optional modules; and 
3. Pass the required post-programme assessment. 

Refundable Commitment Fee 

Selected participants will be asked to pay a USD 50 commitment fee upon enrolment. 

The fee is intended to encourage consistent participation and reduce programme dropouts. It will be fully refunded to participants who successfully complete the minimum programme requirements. Detailed payment and refund procedures will be provided directly to selected participants. 

How to Apply 

Interested SMEs should complete the online application form by the stated deadline. 

Application period: 23 July–21 August 2026 

Application form: https://kiantara.com/ASEANJPSMECybersecurity  

Application deadline: 21 August 2026 

As places are limited, applicants are encouraged to provide clear information about: 

• Their company and principal business activities; 
• Current use of digital systems and platforms; 
• Existing or planned international operations; 
• Interest in the Japanese market; 
• Cybersecurity, data-management, or compliance challenges; and 
• The expected business value of participating in the programme. 

Applications will be reviewed by the programme organizers. Submission of an application does not automatically guarantee selection. 

Frequently Asked Questions 

1. Who is eligible to apply? 
   The programme is open to growth-oriented SMEs from ASEAN Member States. Applicants should have active digital operations, cross-border business activities, or a clear interest in entering or expanding within the Japanese market. Each applicant must meet at least two of the eligibility criteria listed above. 

2. Are applicants from Timor Leste eligible to apply for this program? 
   In FY2026, participation in the ASEAN-Japan SME Cybersecurity and Market Expansion Programme is limited to companies from the ASEAN-Japan Centre’s member states—Brunei Darussalam, Cambodia, Indonesia, Lao PDR, Malaysia, Myanmar, Philippines, Singapore, Thailand, and Viet Nam—in line with the Centre’s current institutional framework and membership guidelines. As Timor-Leste’s accession and corresponding arrangements with the Centre are still in progress, we regret that we are unable to accommodate applications from Timor-Leste for the FY2026 cycle. 

3. Does my company need to be currently exporting to Japan? 
   No. SMEs already working with Japanese companies are welcome, but companies that are actively preparing to enter the Japanese market may also apply. Applicants should be able to demonstrate a genuine interest in Japan and explain how the programme would support their market-expansion plans. 

4. Is the programme limited to technology companies? 
   No. SMEs from different industries may apply, provided that digital systems, online channels, customer or transaction data, cybersecurity, or cross-border digital operations are relevant to their business. 

5. Do applicants need a technical or cybersecurity background? 
   No specialist cybersecurity qualification is required. The programme is designed to help SME decision-makers understand cybersecurity and digital trust from a practical business perspective. Participants should nevertheless be familiar with their company’s digital operations and be able to contribute to internal business decisions. 

6. Who should participate on behalf of the company? 
   The programme is most suitable for founders, CEOs, CTOs, managing directors, or senior managers responsible for digital strategy, operations, business development, information technology, data management, or international expansion. 

7. How many SMEs will be selected? 
   Up to 50 SME participants are expected to join Phase 1. Participants who satisfy the programme’s readiness requirements may subsequently be invited to Phase 2. 

8. Is the programme conducted online? 
   Most learning, mentoring, and networking sessions are expected to be conducted online. The programme may also include hybrid or onsite components, depending on the final arrangements. The participation requirements for any hybrid activities will be communicated in advance. 

9. What is the difference between Phase 1 and Phase 2? 

• Phase 1 focuses on learning, diagnostics, applied exercises, and preparation. It is open to the main cohort of selected SMEs. 
• Phase 2 is intended for participants who demonstrate sufficient readiness and engagement. It provides more targeted mentoring, co-creation, networking, and possible business-matching activities. 

10. Does selection for Phase 2 guarantee a Japanese business partner? 
    No. Phase 2 provides facilitated opportunities to meet and engage with potential Japanese counterparts. However, participation does not guarantee a commercial agreement, investment, letter of intent, or other business outcome. 

11. How much does the programme cost? 
    Selected participants will pay a USD 50 commitment fee upon enrolment. The fee will be fully refunded after successful completion of the programme’s minimum requirements. 

12. What are the minimum completion requirements? 
    Participants must complete at least four modules—two mandatory core modules and at least two optional modules—and pass the required post-programme assessment. 

13. Will participants receive a certificate? 
    Yes. Participants who satisfy the completion and assessment requirements will receive a Certificate of Completion jointly issued by ASEAN-BAC and AJC. 

14. What is the programme language? 
    The principal programme language will be English. Japanese materials or bilingual facilitation may be provided where applicable. Applicants must be able to participate effectively in English. Recent English-language test results are not required; proficiency may be demonstrated through educational or professional experience. 

15. How will the training topics be selected? 
    Applicants and other participating SMEs will complete a diagnostic survey before the programme. The results will be used to identify common challenges and finalize the optional modules and practical exercises. 

16. When will applicants receive the selection results? 
    The organizers will communicate the selection results and enrolment instructions after the application review. The exact notification date will be announced through the application page or confirmation email. 

17. Who can I contact for further information? 
    For programme-related inquiries, please contact: 

ASEAN Business Advisory Council 
Email: research@asean-bac.org 

ASEAN-Japan Centre 
Email: info_rpa@asean.or.jp