JOHOR BARU: Conduct regular cybersecurity audits on government agencies and the private sector handling sensitive information to ensure their defences are adequate, the government has been urged.
Malaysia Cyber Consumer Association president Siraj Jalil said this should accompany the new Cybersecurity Bill, which is expected to be presented by the government in October.
“It’s essential for agencies and private companies to incorporate and practise the requirements of the Cybersecurity Bill so that no organisation can escape responsibility.
“The government should set a benchmark or standard operating procedure to prevent and address data breaches so that these agencies and companies can be held accountable.
“Hiring approved and licensed third-party cybersecurity firms is encouraged so that those handling data can identify their weaknesses and make improvements rather than taking on all the responsibility by themselves,” he said.
Siraj added that this will help prevent agencies and the private sector from becoming complacent and ensure they are always vigilant and prepared for cyber-attacks.
“There should be no complacency in cybersecurity; we must remain alert at all times.
“The recent attack on Iran’s Internet provider should remind us that these attacks can happen anytime,” he said, adding that cyber-defence requires constant critical thinking.
“Cybercriminals use critical thinking to find ways to attack or disrupt systems, so we in defence must do the same.
“Cyber-threats evolve every two to three months with new viruses or scam tactics. We must keep our awareness campaigns current and relevant,” he added.
Siraj also said the community plays a crucial role in protecting itself and improving its digital literacy in terms of cybersecurity.
He was asked to comment on Prime Minister Datuk Seri Anwar Ibrahim’s statement on Malaysia needing to improve its cybersecurity, noting that the country lags behind others.
Meanwhile, Siraj described the government’s plan to introduce a “kill switch” to enhance digital security as a “significant step in protecting critical infrastructure and sensitive data”.
“We hope this legislation will provide a robust mechanism for swiftly shutting down harmful digital operations during a cyber-threat.
“Implementing a ‘kill switch’ can help mitigate the damage caused by cyber-attacks, ensuring that our national security, economy and public safety are protected.”
