This article was accepted into the corpus but its outbound wikilinks were never NER-processed — typical at the deepest BFS hop or when the run's entity cap was reached. No expansion funnel to show.
| CERT Malaysia | |
|---|---|
| Name | CERT Malaysia |
| Formation | 1997 |
| Headquarters | Cyberjaya, Selangor |
| Region served | Malaysia |
| Parent organization | Malaysian Communications and Multimedia Commission |
CERT Malaysia
CERT Malaysia is the national computer emergency response team serving Malaysia with responsibilities in cyber incident coordination, vulnerability handling, and national cyber resilience. It operates as part of the Malaysian Communications and Multimedia Commission framework and engages with regional and international partners such as APCERT, FIRST and national agencies. CERT Malaysia's remit touches on critical infrastructure sectors including telecommunications, finance, and health, and it liaises with regulatory, law enforcement, and policy institutions.
CERT Malaysia traces roots to the policy and regulatory reforms of the late 1990s in Malaysia following regional technology initiatives and the growth of the Internet. Its creation in 1997 followed models from early teams such as the original CERT Coordination Center at Carnegie Mellon University and contemporaneous national teams in Singapore and Australia. Over time the team expanded operations to coordinate responses to major events like the WannaCry ransomware attack, the NotPetya outbreak, and other transnational incidents. CERT Malaysia’s evolution has been shaped by regional cooperation platforms including APCERT, multilateral dialogues involving ASEAN, and standards promulgated by bodies such as ISO.
CERT Malaysia is administratively linked to the Malaysian Communications and Multimedia Commission and operates within Malaysia’s ICT policy architecture alongside agencies like the Royal Malaysia Police cybercrime units and the National Cyber Security Agency (NACSA). Its governance model integrates technical teams, legal and policy advisors, and liaison officers seconded from agencies such as the Ministry of Communications and Digital. Decision-making draws on incident escalation protocols comparable to those used by US-CERT and the European Union Agency for Cybersecurity (ENISA). Operational governance includes memoranda of understanding with sectoral regulators in Bank Negara Malaysia and statutory bodies overseeing critical sectors.
CERT Malaysia provides a suite of services including vulnerability coordination, incident triage, threat intelligence sharing, and advisories. It publishes security alerts and technical guidance akin to bulletins issued by the National Institute of Standards and Technology (NIST) and coordinates disclosure processes modeled after practices at the CERT Coordination Center. The team offers automated feeds and enrichment similar to services from VirusTotal and exchanges indicators of compromise with platforms used by Interpol and regional CERTs. It also supports digital forensics capacity building comparable to training from SANS Institute and forensic labs affiliated with academic institutions such as Universiti Malaya.
Incident response operations follow playbooks and standard operating procedures informed by international frameworks like the NIST Cybersecurity Framework and incident handling guidance from FIRST. CERT Malaysia conducts incident classification, containment, eradication, and recovery activities while coordinating cross-sector response with agencies such as the Royal Malaysia Police and the Ministry of Health (Malaysia) when healthcare systems are affected. The team engages in real-time coordination for botnet takedowns, distributed denial-of-service mitigation, and ransomware response, often interoperating with law enforcement investigations and prosecution frameworks derived from statutes like the Computer Crimes Act 1997.
CERT Malaysia maintains partnerships with regional and global bodies including APCERT, FIRST, ICANN, and law enforcement networks such as INTERPOL and ASEANAPOL. It collaborates with academic research centers at institutions like Universiti Putra Malaysia and Multimedia University, and technology vendors including major cloud providers and cybersecurity firms such as Cisco Systems and Microsoft. Bilateral ties with national teams in Indonesia, Singapore, Japan, and Australia enable threat-sharing and joint exercises; engagement with multilateral initiatives under ASEAN and dialogue partners supports policy harmonization.
Public outreach includes advisories, workshops, and trainings aimed at enterprises, critical infrastructure operators, and civil society. CERT Malaysia designs capacity-building programs inspired by curricula from SANS Institute and collaborates with vocational and higher education institutions such as Universiti Teknologi Malaysia to develop talent pipelines. Campaigns addressing phishing, malware, and social engineering draw upon communications models used by agencies like Cybersecurity and Infrastructure Security Agency (CISA) and leverage partnerships with industry groups including Malaysian National Computer Confederation.
CERT Malaysia has been active in coordinating national responses to incidents including significant malware outbreaks and targeted campaigns affecting financial institutions and telecommunication providers. Notable coordinated responses involved mitigation measures during the WannaCry ransomware attack period and handling of large-scale data breach disclosures that required cross-agency notification to regulators such as Bank Negara Malaysia and consumer protection bodies. Its role in multi-jurisdictional investigations has included information exchanges with INTERPOL and other national CERTs to trace threat actor infrastructure and support takedowns.
Category:Computer emergency response teams Category:Cybersecurity in Malaysia