There are many opportunities and offerings available on the Internet, but it also poses significant dangers. As our reliance on digital platforms continues to increase, so does our exposure to online security risks.
A recent study by cybersecurity company SurfShark has revealed that Malaysia has faced numerous challenges in terms of online security in 2023. The study shows that Malaysia was the eighth most breached country between July and September this year, with a shocking 494,699 leaked accounts exposed to potential cyberthreats.
Given these statistics, the emergence of new digital policies from the government is causing concern among Malaysians about the security and privacy of their personal information.
Efforts to strengthen cybersecurity and protection of personal data are being taken by the government. In Budget 2024, CyberSecurity Malaysia (CSM) was allocated RM60mil to enhance its preparedness against cyber- attacks. The funding would be used to implement the 5G Cyber-security Testing Framework and develop local expertise in 5G technology.
Prime Minister Datuk Seri Anwar Ibrahim’s administration is also working on a Cybersecurity Bill and an amendment to the Personal Data Protection Act 2010 (PDPA), expected to be presented in Parliament early next year.
The new Cybersecurity Bill aims to focus on regulatory powers and law enforcement, while the PDPA amendments will include increased fines against cyberattackers.
While these steps have been seen as a welcome start by industry experts, there are opinions that more needs to be done.
Enhancing Cybersecurity Measures
Universiti Teknikal Malaysia Melaka’s information security and cybersecurity expert Prof Rabiah Ahmad believes that the new laws will focus on protecting critical information infrastructure in the country; thus strengthening cyberresilience, protecting sensitive information, and safeguarding vital systems against evolving cyberthreats.
On the other hand, cybersecurity expert and LGMS Bhd’s executive chairman Fong Choong Fook says the private sector is looking forward to having more accountability under the new law. He also points out that government agencies need to be held accountable for data breaches as well, considering a significant number of these originate in government sectors.
Muhammad Sufyan Basri from the Personal Data Protection Department (PDP) proposes amending the PDPA to include data protection officers, data breach notifications, direct obligations on data processors, data portability, and removing the whitelist for crossborder data transfers.
5G Cyber Security Framework
The 5G Cyber Security Testing Framework, funded by the RM60mil allocation to CSM, is expected to enhance the country’s resilience against cyberthreats. It involves an assessment of 5G infrastructure and networks for vulnerabilities and a focus on developing local talent and capabilities in understanding, implementing, and securing 5G technologies.
On the other hand, Fong has reservations about this framework, stating that 5G and cybersecurity are two different areas that require distinct approaches.
Culture of Awareness
Fong and Rabiah both stress the need for a culture and awareness within society to boost cybersecurity. Efforts to promote cybersecurity awareness among individuals and organizations, strict enforcement of regulations, and investment in research and development in this field are suggested to further enhance cybersecurity.
Experts caution the public to stay alert and updated on future threats as the nation undergoes digital transformation. According to Rabiah, it is essential for experts and practitioners to be equipped with the latest knowledge and skills to protect the nation against emerging threats.
