Nacsa raises cybersecurity threat level from ‘low’ to ‘medium’

The National Cyber Security Agency (Nacsa) has elevated the national cybersecurity threat level from "low" to "medium", according to the National Security Council (MKN). This precautionary measure comes following current security developments aimed at guaranteeing the continuous operation of essential services, as reported by Bernama.

MKN held meetings with sector heads and entities within the national critical information infrastructure (NCII) to enhance preparedness coordination across all sectors. The 9 cybersecurity preparedness measures mandated by these meetings include 24-hour monitoring, system patching, multi-factor authentication, and updating service continuity plans.

Prime Minister Anwar Ibrahim discussed national security preparedness in the Dewan Rakyat on November 3, highlighting the importance of these measures in response to evolving geopolitical and regional security tensions. NCII sector heads are responsible for submitting weekly threat status reports to Nacsa.

Nacsa operates through the National Cyber Coordination and Control Centre (NC4), which executes three key functions: issuing cybersecurity alerts and advisories, bolstering threat detection and assessment capabilities, and monitoring NCII entities and government agencies. These measures aim to proactively prevent and mitigate disruptions to national services.

In the past month, NC4 issued eight alerts and advisories concerning vulnerabilities affecting NCII entities and government agencies. MKN remains committed to upholding the nation's security, stability, and sovereignty through continuous preparedness measures to protect people and national interests. Anwar previously stated that Malaysia was potentially at risk of cyberattacks due to its robust digital infrastructure and government stance on international issues, particularly regarding Palestine and Gaza.