Malaysia: Adopted Cyber Security Risk Assessment and Audit Regulations

On 16 August 2024, the Cyber Security (Period for Cyber Security Risk Assessment and Audit) Regulations were adopted. The regulations mandate that entities owning or operating national critical information infrastructure conduct a cyber security risk assessment annually and an audit biennially or more frequently as directed by the Chief Executive of the National Cyber Security Agency Malaysia (NACSA).