Cyber Security Act 2024
Malaysia's cybersecurity legislation establishing licensing requirements for cybersecurity service providers and mandatory security measures for critical infrastructure.
The Cyber Security Act 2024 (Act 854) is Malaysia's first dedicated cybersecurity legislation. It establishes a regulatory framework for the country's cybersecurity landscape, including licensing requirements for cybersecurity service providers, mandatory security standards for national critical information infrastructure (NCII) operators, and powers for NACSA to coordinate national cyber incident response.
Impact on Businesses
If your organisation operates critical infrastructure (energy, banking, healthcare, transport, government) or provides cybersecurity services, you may need to comply with new licensing and reporting requirements under this Act. Even businesses outside NCII sectors should understand the Act as it raises the bar for cybersecurity standards nationally.