Cybersecurity law tabled for first reading

During the recent session of the Dewan Rakyat, the Cyber Security Bill 2024 was introduced by Digital Minister Gobind Singh Deo with the aim of bolstering national cybersecurity measures in Malaysia.

The Bill is set to undergo a second reading within the current session and focuses on implementing specific measures and standards to enhance national cybersecurity, particularly in managing cybersecurity incidents involving critical national information infrastructure (CNII).

One key feature of the Bill is the establishment of a national cybersecurity committee, which will be chaired by the Prime Minister and consist of various ministers overseeing crucial sectors such as finance, foreign affairs, defence, and communications.

The committee will also include members from important agencies such as the Armed Forces, Inspector-General of Police, and National Security director-general, as well as individuals with expertise in cybersecurity appointed by the committee.

Additionally, the Bill outlines the duties and powers of the National Cyber Security Agency (NCSA) chief executive officer, as well as the licensing requirements for cybersecurity service providers.

Furthermore, the Bill addresses the appointment of a CNII sector lead, stating that the minister may appoint government entities or individuals to oversee specific CNII sectors based on recommendations from the chief executive.

It is also mentioned that more than one CNII sector lead can be appointed for each CNII sector, with the names of these appointees being published on the official website of the NCSA.

According to the Bill, CNIIs are defined as systems whose destruction or disruption could have severe repercussions on essential services related to national security, defense, economy, public health, safety, and public order within the country.

The Cyber Security Bill 2024 is a significant step towards strengthening Malaysia’s cybersecurity infrastructure and safeguarding critical national information assets against potential cyber threats and attacks.