Malaysia: Adopted Cyber Security Incident Notification Regulations

On 19 August 2024, the Cyber Security (Notification of Cyber Security Incident) Regulations 2024 were adopted. These regulations, enacted under the Cyber Security Act 2024, mandate national critical information infrastructure entities to notify of any cyber security incidents. The regulations specify the process for immediate notification upon discovery, followed by detailed reporting within 6 hours and comprehensive supplementary information within fourteen days. This initiative is part of the national strategy to enhance cybersecurity resilience across all sectors.