National cybersecurity threat level raised to moderate

The Malaysian government has increased the National Cyber Threat Level from low to moderate as a preventive measure against potential security issues. This decision was made by the National Security Council (NSC) to ensure that the country's essential services remain secure from possible disruptions. The National Cyber Security Agency (Nacsa) convened a meeting with representatives from critical sectors and entities responsible for protecting the nation's critical information infrastructure (NCII) to enhance preparedness and coordination among them.

During the meeting, nine cybersecurity preparedness measures were discussed and outlined for all NCII entities, which include continuous 24-hour monitoring, regular system patching, implementation of multi-factor authentication, and updates to their Service Continuity Plans. Moreover, sector leads of NCII entities are now obligated to provide weekly threat status reports to Nacsa.

These preparedness measures were also presented at a recent gathering of ministry secretaries-general and heads of service. The National Cyber Coordination and Command Centre (NC4), managed by Nacsa, is continuously engaged in three essential tasks: disseminating cybersecurity alerts and advisories, bolstering threat detection and assessment capabilities, and overseeing the cybersecurity of NCII entities and government agencies.

In October alone, NC4 issued eight alerts and advisories regarding vulnerabilities affecting NCII entities and government agencies. These measures aim to enable preventive and mitigation actions to be taken earlier, thereby reducing the risk of disruptions to the country's essential services. The government remains steadfast in its commitment to uphold the security, stability, and sovereignty of the nation by implementing comprehensive, integrated, and continuous preparedness measures to protect its people and national interests.