Accessibility

Day 2 of the Critical Sector Auditing and Risk Analysis Workshop

Following the high-level opening conference, the second day of the critical sector auditing and risk analysis workshop for Malaysia focused on understanding different auditing approaches and their uses.

Sessions led by EU CyberNet experts Christian Schlehuber, Ilmar Toom and Nick Small, introduced participants to different auditing approaches in order to understand how structured maturity assessment can help evaluate organisational resilience. Speakers highlighted that good audits improve resilience not only compliance. 

The main take-aways included: 

  • Risk-based cybersecurity auditing must prioritise threats and vulnerabilities based on their likelihood and potential impact. This approach links security evaluations directly to organisational risk tolerance and strategic objectives, enabling decision-makers to allocate resources efficiently. 
  • Compliance-based cybersecurity auditing ensures cybersecurity aspects have been embedded into workflows. This helps to determine the maturity level of compliance. 
  • Technical-based cybersecurity auditing evaluates whether established controls are adequately designed, implemented and applied which helps to ensure coverage. 
  • Inspection and verification approaches facilitate understanding about how effective the cybersecurity measures are. 
  • The final session discussed the importance of follow-up activities after auditing such as developing plan to drive improvement and control auditing, but also understanding the value of collaborative reviews to identify opportunities for improving the auditing process itself.  

Links 



Keep reading similar articles
EU CyberNet Crash Course #4: OSINT in the Age of AI

The 4th EU CyberNet Crash Course, titled “OSINT in the Age of AI” and led by EU CyberNet instructor Ago Ambur explored how open-source intelligence (OSINT) is changing through artificial intelligence (AI).

At SICW 2026: Strengthening Critical Infrastructure Resilience

EU CyberNet together with National Cyber and Information Security Agency of the Czech Republic (NUKIB) brought together European and Southeast Asian cybersecurity leaders during Singapore International Cyber Week 2026 to strengthen critical infrastructure resilience.

Strengthening Cybersecurity Resilience in Cambodia: EU CyberNet Completes Scoping Mission

EU CyberNet concluded strategic scoping mission in Phnom Pehn, Cambodia this week.

EU CyberNet at the INHOPE Summit 2026: Pathways to Awareness Raising for Young People

EU CyberNet Experts Lead Cecilia Popa attended this week the INHOPE Summit 2026 in Dublin, Ireland. Hosted by Meta, the summit brought together stakeholders around online harm, specifically hotlines working to remove child sexual abuse (CSAM) from the internet and offered platform to discuss how to move towards building coordinated systems for prevention.

Building Cybersecurity Resilience in Lao PDR: EU CyberNet Completes Strategic Scoping Mission

EU CyberNet concluded strategic scoping mission in Vientiane, Laos this week.

At CySec 2026: Workshop on How the AI is Transforming OSINT

EU CyberNet conducted a hands-on workshop titled “AI-Enabled OSINT and Threat Intelligence” at the 4th Brunei Cybersecurity Conference CySec 2026 on 16 September 2026 to support practical knowledge-sharing and cooperation between the European Union and Indo-Pacific region.