Until 2 years ago, there was only 1 CERT team for the entire country of Thailand. This relatively small National CERT team has done amazing work, but cannot possibly do everything needed to protect the government, critical infrastructure and all 76 million citizens.After a thorough assessment of the country's security posture, a bold plan was drafted how to scale up security throughout the country. This was established into law at the end of 2016.The first and foremost challenge is the lack of people, tools and procedures to establish teams at all organizations.We started by implementing a central government protection solution to combat a large percentage of incidents such as website defacements and infections. Then we began to establish sector-based CERT teams for all critical infrastructure, allowing a better pace in implementing security in the individual organizations while having some form of incident management and coordination in place already. New services have been added to the ThaiCERT portfolio to accommodate this - for example our own annual security conference and a threat intelligence service with daily news feeds.The next step was improving awareness at a young age, for which we teamed up with other organizations to produce workshops and training in schools, first in Bangkok only, now spreading out to other cities.For the next year, we have ambitious targets on capacity building to steeply increase the security work force in the country. For this, we work with universities and organizations such as CMU and ISC2 to create professional training programs that can scale to 1000 professionals per year.This presentation will also cover how the ThaiCERT organization deals with being stretched to breaking point and the cultural and language challenges I experienced myself as one of material authors, trainer and responsibility for threat intelligence.