Page 6 - 20v•Cyber Security Strategy 2020-2024

6 Malaysia Cyber Security Strategy 2020-2024

security controls over vital assets, of the laws of Malaysia with a view
as well as to ensure that the CNII to enhance the existing legislative
sectors are protected to a level and regulatory framework used
that commensurate with the risks to combat cybercrime. The
faced. amendments to certain laws are
now in progress, where the AGC
The establishment of the National collaborates with law enforcement
Cyber Security Agency (NACSA) agencies and other relevant
further reaffirmed the growing government bodies.
importance of cyber issues to
Malaysia’s national security. Furthermore, a national policy
NACSA is a dedicated agency that and procedure in managing
oversees all national cyber security cyber crises has been formulated
functions formed under the aegis to ensure that cyber attacks
of the National Security Council and cyber incidents are being
(NSC). NACSA was established managed proactively through
as a response to the dynamic a coordinated approach at the
nature, increasing sophistication, national level. This initiative is
global nature and heighten socio- closely guided by the National
economic impact of cyber security Security Council’s Directive
threats. It serves as the lead No 24: Policy and Mechanism
agency that integrates the existing of the National Cyber Crisis
cyber security capabilities. This Management, an executive
includes combating cybercrime directive that outlines the
in a strategic and coordinated nation’s strategy for ‘cyber crisis
manner in partnership with mitigation and response’ through
the private sector and other public and private collaboration
governments. and coordination. There are six
(6) main principles under this
The efforts are ongoing to directive namely national cyber
assess the current legislative crisis management structure;
framework for cybercrime issues national cyber-threat levels;
and cases. In order to adapt to Computer Emergency Response
the ever-changing landscape of Team (CERT); cyber security
cyberspace, existing laws need protection mechanisms; response,
to be enhanced to effectively communication and coordination
address the legal challenges procedures; and a readiness
in taking action against cyber programme.
criminals. The Attorney General’s
Chambers (AGC) led the review