← News & insights Kazakhstan · Digital

Washington puts $5 million behind Central Asia’s cyber defences

A new U.S. assistance package, unveiled at the C5+1 conference in Astana, targets the security gaps that keep American capital cautious about the region’s digital economy.

CASA · Sep 30, 2026
Rows of server racks inside a data centre
Photo: BalticServers.com / Wikimedia Commons, CC BY-SA 3.0.

The United States has committed $5 million to strengthen cybersecurity and the digital sector across Central Asia, a package announced at the C5+1 conference in Astana on September 29.

The assistance will be delivered through CRDF Global and covers four areas: cyber incident response, the protection of critical infrastructure, security in the financial sector, and cybersecurity policy.

Security as the price of entry

Mark Cameron, Deputy Assistant Secretary in the State Department’s Bureau of South and Central Asian Affairs, framed the package in commercial terms. Stronger cyber defences and trusted digital infrastructure, he argued, are what will give American companies the confidence to invest more across the region. He also tied cybersecurity directly to the region’s ambitions in artificial intelligence: advanced AI, in his telling, can only be built on a secure foundation.

The message lands at a moment when every Central Asian government is courting data centres, cloud providers and AI partnerships, and when the C5+1 relationship has already produced more than $25 billion in commercial deals since the leaders’ summit at the White House.

What it means for CASA clients

For U.S. technology and infrastructure companies, the package is a signal that Washington is investing in the operating environment itself, not only in individual deals. Incident-response capacity and clearer cybersecurity policy reduce exactly the risks that compliance and security teams flag first when assessing a new market.

For Central Asian companies seeking U.S. partners, it raises the bar. American counterparts will increasingly expect credible security practices, data protection and governance as a condition of doing business, and the companies that can demonstrate them early will be better placed when that capital arrives.