On 26 August 2024, the Cyber Security (Period for Cyber Security Risk Assessment and Audit) Regulations entered into force. The regulations mandate that entities owning or operating national critical information infrastructure conduct a cyber security risk assessment annually and an audit biennially or more frequently as directed by the Chief Executive of the National Cyber Security Agency Malaysia (NACSA).
Original source