Malaysia is strengthening its cyber resilience through the establishment of the Cyber Security and Cryptography Development Centre (CSCDC) and the approval of the Malaysia Cyber Security Strategy (MCSS) 2025–2030.
The CSCDC was formed by consolidating the functions of the Malaysia Cryptographic Management and Technology Centre (PTPKM) and CyberSecurity Malaysia (CSM). Under the management of the Prime Minister's Office, the CSCDC serves as the Government’s key technical and operational arm supporting the National Cyber Security Agency (NACSA). NACSA's National Cyber Coordination and Command Centre (NC4) has also been strengthened to enhance its ability to address advanced threats and deliver higher-impact intelligence.
Meanwhile, the MCSS 2025–2030, refined from a framework established four years ago, carries the theme “Cyber Security Resilience: Nurturing an Adaptive Digital Society.” It emphasises sovereignty and the importance of Malaysians designing, developing, and sustaining their own cyber security capabilities. The strategy identifies cyber security as a shared responsibility, with each community regarded as an active partner in national cyber security efforts.
Furthermore, the National Cryptography Policy (MyKriptografi), published in February this year, will serve as a comprehensive national reference document for transitioning to post-quantum cryptography, supporting Malaysia's goal of becoming a quantum-safe nation by 2030.
International cooperation remains a top priority in Malaysia's cyber security policy. However, the focus will gradually shift from information sharing and capacity building towards the co-development of technology and capabilities. This transition presents significant opportunities for local industries, enabling Malaysian talent to reach new heights and helping the country not only meet domestic needs but also make meaningful contributions to the Association of Southeast Asian Nations (ASEAN) ecosystem.
To ensure accountability, Malaysia plans to finalise the Cybercrime Bill this year which addresses both cyber-dependent and cyber-enabled offences, introducing stricter penalties and prison terms to enhance deterrence.
