Malaysia must adopt risk-based cyber defence as threats accelerate

CYBERJAYA, Aug 29 — Malaysia's approach to cybersecurity must evolve to match the pace of modern threats, according to industry experts gathered here to discuss the nation's digital defence framework.

With cyber attacks now operating at machine speed, security officials have stressed the need for a more agile, risk-based strategy rather than traditional perimeter-focused defences. The shift reflects growing recognition that conventional security measures struggle to keep pace with sophisticated, rapidly-deployed threats targeting critical infrastructure and private sector operations.

Malaysia established its cyber emergency response systems nearly 30 years ago, but experts argue that the country's defences must now prioritise identifying and mitigating the highest-risk vulnerabilities rather than attempting comprehensive protection across all systems.

The recommendations come as regional governments intensify efforts to strengthen cybersecurity capabilities amid rising incidents of data breaches, ransomware attacks, and state-sponsored cyber operations. Security authorities in Malaysia have indicated support for adopting more dynamic defence mechanisms that can adapt to emerging threats in real time.

The emphasis on risk-based approaches aligns with global best practices, where organisations prioritise resources toward protecting their most critical assets and business functions. Implementation is expected to involve greater coordination between government agencies, financial institutions, and private sector operators.