The context
Why this conversation, why now
CyberSecurity Malaysia's Cyber999 centre logged 5,735 incident reports in the first nine months of 2025, over a thousand more than the same period a year earlier, and police reported online fraud losses above RM700 million. Financial services lead the country in AI adoption, at 53% of firms, which makes the sector both the fastest adopter and the most attractive target.
Financial and critical infrastructure assets are increasingly exposed as digital tools, AI and digital twins are adopted faster than security practice matures. Unsecured adoption creates a new attack surface that most providers and buyers have not yet built into their risk planning. This panel brings government, banking and cybersecurity voices together to set out, plainly, what buyers will require of service providers.
5,735
cyber incident reports, January to September 2025
RM700m+
online fraud losses reported in 2025
53%
of financial services firms have adopted AI
Objectives
What this session will set out to do
- 01Set out what government, banking and critical-infrastructure buyers require of service providers to secure their assets.
- 02Address the new attack surface created by digital tools, AI and digital twins.
- 03Show how providers can account for cyber risk in planning and delivery.
Five Pillars
Where it fits
Challenges on the table
- Digital adoption is outpacing security practice.
- Most providers and buyers have not yet accounted for the new attack surface in risk planning.
- Buyer requirements for securing assets are not clearly set out for service providers.
Opportunities to explore
- Define clear buyer requirements for securing financial and critical infrastructure.
- Embed cyber risk into risk planning for providers and buyers.
- Connect the discussion to the cyber-trust agenda and the Malaysian Industry Trust Mark.
Outcomes
What it will deliver
- Set out buyer requirements for securing financial and critical infrastructure.
- Identify risks created by digital tools, AI and digital twins.
- Feed cyber-trust requirements into the Malaysian Industry Trust Mark.
Digital adoption strengthens, rather than weakens, trust in Malaysia's financial and critical infrastructure.
Session journey
Where it leads
This session
- Securing Financial & Critical Infrastructure
Informs the first post-AIFTIS working track set by
Sources for figures on this page: Ministry of Digital via theSun, December 2025 (Cyber999 incidents, fraud losses); AWS and Strand Partners study via Business Today, August 2026.
More sessions