Federal Legislation - Cyber Security Act 2024

1.

Cyber Security Act 2024

Cyber Security Act 2024 [Act 854] which was published on 26 June 2024 and received the Royal Assent on 18 June 2024.

Please click on the following for further details:

• Cyber Security Act 2024
• Appointment Of Date Of Coming Into Operation

2.

Cyber Security (Period For Cyber Security Risk Assessment And Audit) Regulations 2024

Cyber Security (Period For Cyber Security Risk Assessment And Audit) Regulations 2024 [P.U. (A) 219] which was gazetted on 22 August 2024 relating to a national critical information infrastructure entity owned or operated a national critical information infrastructure shall:

• conduct a cyber security risk assessment at least once a year; and
• carrying out an audit at least once in every two years or at such higher frequency as may be directed by the Chief Executive in any particular case.

Please click here for further details.

3.

Cyber Security (Notification Of Cyber Security Incident) Regulations 2024

Cyber Security (Notification Of Cyber Security Incident) Regulations 2024 [P.U. (A) 220] which was gazetted on 22 August 2024 relating to an authorised person of a national critical information infrastructure entity shall immediately within six hours, by electronic means, give a notification of a cyber security incident that has or might have occurred as provided under section 23 of the Act when the cyber security incident comes to the knowledge of the national critical information infrastructure entity.

Please click here for further details.

4.

Cyber Security (Licensing Of Cyber Security Service Provider) Regulations 2024

Cyber Security (Licensing Of Cyber Security Service Provider) Regulations 2024 [P.U. (A) 221] which was gazetted on 22 August 2024, shall apply to cyber security service relating to managed security operation centre monitoring service and penetration testing service. These Regulations shall not apply if:

• the cyber security service is provided by a Government Entity;
• the cyber security service is provided by a person, other than a company, to its related company; or
• the computer or computer system in respect of which the cyber security service is provided is located outside Malaysia

Please click here for further details.

5.

Cyber Security (Compounding Of Offences) Regulations 2024

Cyber Security (Compounding Of Offences) Regulations 2024 [P.U. (A) 222] which was gazetted on 22 August 2024 relating to the prescribed offences in First Schedule as compoundable offences and the compoundable offences may be compounded with the consent in writing of the Public Prosecutor in Form 1 of the Second Schedule.

Please click here for further details.