Malaysia’s Cyber Security Act 2024 establishes regulatory standards for the nation’s cyber defenses. The Act provides a legislative framework for protecting national critical information infrastructure. It introduces provisions for managing cyber security threats and incidents, as well as regulating cyber security service providers. The Act also establishes the National Cyber Security Committee as the relevant authority.
The Act has extra-territorial application and imposes requirements on businesses operating in Malaysia. Designated businesses must implement sector-specific codes of practice and conduct cyber security risk assessments and audits. They must also notify the authorities of cyber security incidents.
