KUALA LUMPUR – At least 100 cybersecurity professionals will be accredited as certified chief information security officers (C-CISOs) by year-end, as part of a national push to boost cyber resilience in the public sector, said Digital Minister Gobind Singh Deo.
Gobind said the initiative was a strategic move to strengthen compliance with the Cyber Security Act 2024 (Act 854), especially among entities designated as National Critical Information Infrastructure (NCII).
The act, which came into force earlier this year, mandates a coordinated national approach to securing Malaysia’s digital infrastructure. It establishes regulatory powers for the National Cyber Security Agency (Nacsa) to oversee and enforce cybersecurity standards across NCII sectors – including energy, finance, transport, healthcare, and government services – and requires mandatory risk assessments, incident reporting, and continuous monitoring.
“The C-CISO programme is a long-term investment in building the country’s digital leadership. It is vital that we develop a competent and qualified cybersecurity workforce to ensure the effective and sustained enforcement of the act,” he said at the launch of the Cyber Security Professional Capability Development Programme today.
“This requires professionals who not only understand legal and technical requirements, but can also translate them into operational and strategic actions,” Gobind said.
“Without skilled and certified personnel, even the best policies risk failure.”
Seven officers received their C-CISO certification today under the first phase of the programme, which is jointly implemented with the EC-Council and Human Resource Development Corporation (HRD Corp).
“The target is to certify 100 C-CISOs this year. This is only the beginning. We want more professionals to step forward and take up this challenge,” he said.
Gobind stressed that chief information security officers play a critical role in safeguarding digital infrastructure and organisational preparedness against increasingly sophisticated cyber threats.
“A CISO ensures that policies are not just written but implemented, that systems meet security standards, and that the organisation is always ready to respond to cyber incidents. They also act as a strategic bridge between government, industry, and the NCII community,” he said.
The C-CISO certification covers five key domains – governance, security audit, data protection, operations management and strategic planning – aimed at building holistic leadership in cybersecurity.
Gobind also highlighted that the programme will be expanded beyond the public sector to cultivate a pipeline of local experts across industries.
He added that the effort reflects a broader shift in national defence priorities.
“Where military strength once defined national power, today it’s about digital trust and security. Cyber defence is now the main pillar of our nation’s stability and prosperity,” he said.
The initiative is part of a broader capacity-building agenda by the Digital Ministry, with implementation support from CyberSecurity Malaysia and strategic international collaboration with EC-Council Asia.
Gobind urged cybersecurity practitioners nationwide to take advantage of the programme, calling it “a significant step forward” in developing capable, globally recognised leaders to defend Malaysia’s digital ecosystem. – June 3, 2025