CYBER SECURITY ACT 2024

This new Act is meant to enhance the national cyber security by providing for the establishment of the National Cyber Security Committee, duties and powers of the Chief Executive of the National Cyber Security Agency, functions and duties of the national critical information infrastructure sector leads and national critical information infrastructure entities and the management of cyber security threats and cyber security incidents to national critical information infrastructures, to regulate the cyber security service providers through licensing, and to provide for related matters.

This new law marks a significant advancement in Malaysia’s efforts to fortify its digital defences. It represents a comprehensive legal framework designed to safeguard the nation’s critical information infrastructure against an increasingly complex landscape of cyber threats.

An important feature of the Act is its focus on cybersecurity service providers, mandating a licensing regime to ensure that only qualified entities are authorised to deliver cybersecurity services. “National critical information infrastructure” means a computer or computer system which the disruption to or destruction of the computer or computer system would have a detrimental impact on the delivery of any service essential to the security, defence, foreign relations, economy, public health, public safety or public order of Malaysia, or on the ability of the Federal Government or any of the State Governments to carry out its functions effectively.

Under the Cyber Security Act 2024, entities classified as National Critical Information Infrastructure (NCII) are subject to stringent risk assessment and audit regulations. These entities are required to conduct a comprehensive cybersecurity risk assessment at least once annually. This process involves evaluating potential vulnerabilities within the NCII that could be exploited by cyber threats or incidents. National Critical Information Infrastructure sector covers :-

• Government

• Banking and finance

• Transportation

• Defence and national security

• Information, communication and digital

• Healthcare services

• Water, sewerage and waste management

• Energy

• Agriculture and plantation

• Trade, industry and economy

• Science, technology and innovation

DISCLAIMER: THE CONTENTS HEREIN ARE INTENDED FOR GENERAL INFORMATION ONLY AND NOT TO BE CONSTRUED AS LEGAL ADVICE. SHOULD YOU HAVE FURTHER QUERIES AND/OR WOULD LIKE TO HAVE THE FULL ARTICLE, KINDLY CONTACT US.