A short concrete table top exercise ensured the participants had time to practice what they had learned from the workshop and test the new skills learned. Participants discussed how they can integrate formal audits into continuous improvement efforts – for example translating audit results into actionable plans and improve future audit cycles.  

“Conscious risk management and meaningful auditing moves cybersecurity beyond compliance toward the resilient capabilities needed for a cyber secure society. Critical infrastructure security requires auditing that goes beyond checklists and focuses on real operational risk, capability and resilience. Malaysia’s approach to cybersecurity demonstrates a structured commitment that confirms the partnership between the EU and Malaysia is especially effective as practitioners examine not only whether cyber controls exist, but whether the underlying capability is sustainable. This kind of knowledge exchange and workshop style explores how maturity-based thinking can complement frameworks to strengthen operational resilience and protect the critical infrastructure that citizens rely on.” – EU CyberNet experts Christian Schlehuber, Ilmar Toom and Nick Small.  

The successful workshop was organised in cooperation between EU CyberNet, the National Cyber Security Agency of Malaysia and the Delegation of the European Union to Malaysia from 20-22 May 2026. The workshop provided a practical introduction to cybersecurity auditing in critical sectors and explored different auditing approaches for organisational resilience. Workshop was led by EU CyberNet experts Christian Schlehuber, Ilmar Toom and Nick Small. 

Links 

• Workshop overview 
• Opening conference overview 
• Second day overview 
• Photos