Malaysia To Enhance Asean Cybersecurity With Regional Cert Leadership -- Gobind

By Nur Ashikin Abdul Aziz

SINGAPORE, Oct 19 (Bernama) -- Malaysia, as the overall coordinator of the ASEAN Regional Computer Emergency Response Team (ASEAN Regional CERT) for 2024/2025, will play a pivotal role in overseeing coordination, capacity-building, and information-sharing initiatives on cybersecurity among member countries.

Digital Minister Gobind Singh Deo said that Malaysia’s key aspirations for the initiative focus on building a secure and resilient regional cyberspace, fostering coordinated responses to transboundary cyber-attacks, and sharing best practices to bolster ASEAN’s overall cybersecurity capabilities.

bootstrap slideshow

“Malaysia supports the establishment of the ASEAN Regional CERT. This will enhance collaboration among ASEAN Member States in addressing cyber threats, improve incident response capabilities, and foster a more unified approach to cybersecurity challenges across the region -- building a more resilient digital ecosystem for all,” he told Bernama via a written statement.

Gobind, who was in Singapore to co-officiate the launch of the physical facility, said Malaysia’s lead for the ASEAN Regional CERT will be conducted through the National Cyber Security Agency (NACSA)’s National Cyber Coordination and Command Centre (NC4).

He added that, as the National CERT serving the country, NC4 coordinates incident response strategies, ensuring the integration of real-time intelligence-sharing mechanisms to enable swift responses to cyber threats.

This will enable swift responses to cyber threats, helping to mitigate risks that transcend national borders, and fortifying the overall cybersecurity posture of the ASEAN region.

The ASEAN Regional CERT physical facility, co-located at the ASEAN-Singapore Cybersecurity Centre of Excellence (ASCCE) in Singapore, will be funded by the republic, with a budget of US$10.1 million for 10 years.

ADDRESSING PRESSING CYBERSECURITY CHALLENGES

Gobind said Malaysia seeks to take the lead in addressing pressing cybersecurity challenges during its ASEAN Chairmanship, implementing targeted objectives such as strengthening incident response and threat intelligence sharing, while fostering a resilient digital ecosystem.

He noted that by creating a coordinated response mechanism for cyber-attacks such as hacking, ransomware, and AI-enabled threats, the region can detect, respond to, and mitigate cyber risks more efficiently.

“This will help secure the region’s digital ecosystem, protecting critical infrastructure, government systems, and businesses from emerging threats, thereby enhancing regional stability,” he said.

Gobind also emphasised the importance of building cybersecurity awareness and a resilient cyber culture, as well as addressing emerging threats and technologies throughout Malaysia’s chairmanship.

This includes targeted outreach programmes aimed at vulnerable sectors, such as SMEs and the general population, to raise cybersecurity awareness and promote best practices for digital safety.

“As cyber threats evolve, so must the region’s approach to mitigating risks. Malaysia is focused on developing robust frameworks, guidelines, and best practices to address emerging technologies, including AI-driven cyber-attacks and ransomware,” he said.

Malaysia, under its chairmanship, has also committed to working with other member states to revise and enhance the ASEAN Cybersecurity Cooperation Strategy for 2026-2030, ensuring that the region remains resilient in the face of evolving cyber threats.

Gobind stressed that Malaysia strongly believes that by intensifying cooperation, aligning with global discussions, and strengthening collaboration with ASEAN Dialogue partners, the region can create a safe and secure digital environment.

DIGITAL MINISTRY INITIATIVES

Meanwhile, Gobind shared that the Digital Ministry has successfully implemented several landmark initiatives and legislative reforms over the past 10 months to build cyber resilience in Malaysia.

This includes the Cyber Security Act 2024, in force since Aug 26, which lays the foundation for protecting National Critical Information Infrastructure (NCII) against cybersecurity threats and establishes clear governance through a National Cyber Security Committee.

“The Act also mandates a licensing regime for cybersecurity service providers, ensuring that only qualified entities are authorised to deliver cybersecurity services,” he said.

Gobind highlighted that to operationalise the Act, four critical regulations have been issued. These include requirements for conducting cybersecurity risk assessments and audits, mandatory notification of cybersecurity incidents, the compounding of offences, and licensing rules for cybersecurity providers.

The ministry also amended the Personal Data Protection Act 2010 in July 2024, introducing mandatory data breach notifications, stricter penalties for non-compliance, and regular audits.

“The amendments also introduced the role of Data Protection Officer to ensure organisations comply with data protection regulations,” he said.

In addition, Gobind said that the National AI Office (NAIO), set to be launched later this year, will be instrumental in shaping Malaysia’s AI landscape and driving innovations that benefit the rakyat, government, and industries.

“It will also develop necessary safeguards and a robust framework to promote the adoption of sustainable and ethical AI practices,” he added.

NAIO will be incubated within MyDIGITAL Corporation, an agency under the Digital Ministry.

-- BERNAMA