Paper: Cyber Security Act 2024, a facelift to the cyber security in Malaysia

By: Sonny Zulhuda

(Pic source credit)

This is a paper published in Cyberpolitik journal based in Istanbul, Turkiye, at the winter of 2025. I put forward my commentaries on the recent new legislation passed by the Malaysian parliament Cyber Security Act 2024.

Digital technology is now part of everything we do, and many essential services rely on digital systems to function. The World Economic Forum has flagged technology-related risks as a major global concern. This includes things like widespread cybercrime, breakdowns in critical infrastructure, digital inequality, and problems caused by new technologies.

When cybersecurity is weak, these problems get worse. Poor security can lead to the spread of misinformation, damage social trust, disrupt supply chains, and even cause social conflicts. That’s why strong cybersecurity policies are so important—they help tackle these challenges and build a more resilient digital future.

With so many cyber threats and attacks making headlines, Malaysian lawmakers decided to make cybersecurity a top priority. They introduced the Cyber Security Act 2024 [Act 854], which was passed by the House of Representatives on 27th March 2024 and gazetted on 26th June 2024.

The Act aims to strengthen national cybersecurity in several ways. It establishes the National Cyber Security Committee and defines the powers of the Chief Executive of the National Cyber Security Agency. It also sets out the responsibilities of sector leads and entities that manage critical national infrastructure.

Additionally, the Act covers how to handle cybersecurity threats and incidents affecting critical infrastructure. It also creates a licensing system to regulate cybersecurity service providers.

The paper can be obtained from this link.

Leave a comment