Malaysia’s Cyber Security Bill 2024: A new era in security

TLDR:

• The Cyber Security Bill 2024 was introduced in Malaysia aiming to enhance cyber security.
• The bill outlines measures, standards, and processes for national critical information infrastructure.

In a move to bolster cyber security in Malaysia, the Cyber Security Bill 2024 was presented to the Malaysian Parliament on March 25, 2024, for its first reading. The bill seeks to establish a regulatory framework that mandates national critical information infrastructure entities to comply with specific measures, standards, and processes to effectively manage cyber security threats and incidents.

The Bill defines national critical information infrastructure (NCII) as computer systems essential to Malaysia’s security, defense, economy, public health, and safety. It designates key sectors as NCII sectors and appoints NCII Sector Leads to oversee the implementation of cyber security measures within these sectors.

Moreover, the bill requires NCII entities to implement measures outlined in a Code of Practice to mitigate cyber security risks and report any incidents to the Chief Executive for investigation. Additionally, the bill mandates licensing for cyber security service providers and grants significant powers to the National Cyber Security Committee and Chief Executive for overseeing and enforcing cyber security measures.