By Peerapong Jongvibool
Malaysia is positioning itself as a regional leader in artificial intelligence (AI) and digital transformation within ASEAN to strengthen its economic competitiveness. Achieving this vision requires greater adoption of cloud services, Internet of Things (IoT) solutions, and technologies like AI, automation, blockchain, Quantum, etc, as Malaysia accelerates its digitalisation.
However, this rapid digital expansion is also widening the attack surface. With AI becoming more accessible, cybercriminals are leveraging AI and automation to make cyber threats — especially ransomware and phishing making them much harder to detect.
In the third quarter of 2024 alone, cyber incidents in Malaysia surged by 10%, with 94% of businesses experiencing at least one security breach last year. Recognising the growing risk, Malaysia’s amended Cyber Security Act 2024 strengthens national cyber defences, particularly for National Critical Information Infrastructure (NCII), by mandating risk assessments, enhanced security measures, and incident reporting. While AI-powered cybersecurity solutions and robust security processes are crucial, the human element remains a major vulnerability. Fortinet’s Cybersecurity Skills Gap 2024 Malaysia survey found that 77% of breaches were linked to skills shortages, and 57% were caused by a lack of employee awareness. The shortage of skilled cybersecurity professionals means organisations cannot afford to leave security gaps unaddressed.
Making Cybersecurity a Boardroom Priority
In today’s evolving threat landscape, cybersecurity is no longer just an IT concern — it is a critical business-imperative that demands board-level attention. The consequences of a breach can be severe, including financial penalties, legal action, and employment loss.
Malaysian boards are increasingly recognising cybersecurity as a fundamental business priority. In Fortinet’s survey, 80% of respondents reported that their boards have heightened their focus on security, while 94% confirmed that cybersecurity is now regarded as a top-tier business imperative.
How to Effectively Engage the Board
While board members recognise the importance of cybersecurity, they may not have deep technical expertise. Security leaders play a crucial role in translating complex cybersecurity concepts into strategic business insights, enabling informed decision-making at the board level. Here’s how to drive meaningful board-level engagements:
- Align cybersecurity with business goals — Board members care about business opportunities and risk management. Framing cybersecurity discussions in this context helps secure top-level support.
- Optimise costs through consolidation and efficiency — Streamlining security solutions reduces complexity and lowers costs while enhancing protection. Investing in energy-efficient infrastructure and cloud security — supports sustainability while driving savings. Addressing the cybersecurity skills gap through automation and managed services helps organisations manage resources effectively without escalating costs.
- Cybersecurity awareness for all — Board members need basic cybersecurity training to understand its organisational impact and regulatory implications.
- Tailor communication for the board — Technical jargons can be overwhelming. Present cybersecurity insights in a way that is clear, concise, and actionable.
- Position cybersecurity as a strategic investment — Cybersecurity should not be viewed as an expense but as a business enabler that mitigates financial and reputational risks.
Leading from the Top: Strengthening Cyber Defences
Board members are now personally accountable for their organisations’ cybersecurity posture. Beyond compliance and regulatory obligations, they must actively lead security efforts to strengthen resilience, drive risk reduction, and ensure long-term business continuity.
Cybersecurity is no longer optional — it is a boardroom responsibility. A strong security culture starts at the top, and organisations that prioritise cybersecurity leadership today will be best positioned to navigate the threats of tomorrow.
The author is Fortinet Senior Director for Southeast Asia
