CyberSecurity Malaysia
CyberSecurity Malaysia is the national cyber security specialist agency under the Ministry of Science, Technology and Innovation, responsible for incident response, digital forensics, certification, and capacity building, including emerging risks from artificial intelligence.
CyberSecurity Malaysia is the national cyber security specialist agency operating under the Ministry of Science, Technology and Innovation (MOSTI). Originally established as the National ICT Security and Emergency Response Centre (NISER), it became an agency under MOSTI in 2005 and serves as a central body for delivering specialised cyber security services that protect the public, the economy, and government services. As artificial intelligence becomes embedded in critical systems and is increasingly used both to attack and to defend, CyberSecurity Malaysia's mandate has grown to include AI-related security risks.
Mandate and Role
The agency's core purpose is to prevent or minimise disruptions to critical information infrastructure and to strengthen national resilience against cyber threats. It provides expertise rather than acting as a general regulator, supporting government, businesses, and citizens through technical services, research, certification, and education. Its work contributes to broader national objectives set out in successive national cyber security policies and strategies.
It is important to distinguish CyberSecurity Malaysia from the National Cyber Security Agency (NACSA). NACSA, established later under the National Security Council, is the lead agency for national cyber security policy and coordination, while CyberSecurity Malaysia is the technical specialist agency delivering operational services. The two work in complementary roles within Malaysia's cyber security ecosystem.
Services
CyberSecurity Malaysia delivers a range of specialised services. Through its Cyber999 incident response service and the Malaysia Computer Emergency Response Team (MyCERT), it handles reports of cyber incidents, coordinates responses, and issues advisories. Its digital forensics department provides analysis supporting law enforcement and the courts. The agency operates security evaluation and certification schemes, including Common Criteria evaluation through MyCC, allowing products to be assessed against international security standards. It also conducts research and risk assessment, provides professional development and certification for security practitioners, and runs extensive outreach and awareness programmes such as CyberSAFE to promote safe online behaviour among the public, students, and organisations.
Artificial Intelligence and Cyber Security
AI intersects with CyberSecurity Malaysia's work in several ways. AI is increasingly used by attackers to automate and scale threats — for example, generating convincing phishing messages, deepfakes, and adaptive malware — which raises the sophistication of attacks the agency must help counter. At the same time, AI enhances defensive capabilities through anomaly detection, automated threat analysis, and faster incident triage. The security of AI systems themselves is a further concern: machine learning models can be targeted by adversarial inputs, data poisoning, model theft, and prompt injection, and the data used to train them must be protected. The agency's certification, research, and awareness functions extend to these emerging risks as AI is integrated into national digital infrastructure.
Significance
As Malaysia expands its digital economy and AI infrastructure — including large data centres and sovereign AI initiatives — the security of critical information infrastructure becomes increasingly central to national interests. CyberSecurity Malaysia provides the technical backbone for this resilience, complementing policy bodies and sector regulators. Its certification and forensic capabilities also support trust in digital services, a prerequisite for the adoption of AI in sensitive sectors such as finance, healthcare, and government.
References
- CyberSecurity Malaysia. (2025). Corporate Overview. cybersecurity.my.
- Malaysian Science and Technology Information Centre (MASTIC). (2025). CyberSecurity Malaysia. mastic.mosti.gov.my.
- CyberSecurity Malaysia. (2025). An Agency Under MOSTI — Media Centre. cybersecurity.my.
- Council of Europe, Octopus Cybercrime Community. (2025). Malaysia country profile. coe.int.