“This workshop reflects the increasing need for practical and actionable support in strengthening national cyber resilience. As cyber threats and regulatory expectations continue to evolve, organisations need to be skilled to meet cyber compliance requirements and build sustainable resilience. EU CyberNet, together with its partners is delighted to partner with Malaysia through this specialised training that combines strategic, operational and technical perspectives in cybersecurity auditing.” – Cormac Callanan, Deputy Director of EU CyberNet.

“Cybersecurity resilience depends on trusted partnerships, shared expertise, and continuous exchange. The European Union is proud to work with NACSA and partners in Malaysia to strengthen capabilities, share best practices, and support organisations in navigating an fast-evolving cyber landscape. By working together to build secure and resilient digital systems, we help foster a stable and trusted digital environment, with shared benefits that support sustainable growth, trade, and investment.” – Rafael Daerr, the Ambassador of the European Union to Malaysia.

“As Malaysia continues to strengthen national cyber resilience framework, enhancing capability in cybersecurity auditing remains crucial particularly for our critical sectors. This workshop provides a useful platform for representatives from government and critical sectors to enhance their understanding and exchange experiences with external partners. NACSA values the collaboration with EU CyberNet and the Delegation of the EU to Malaysia in supporting our effort to strengthen our cyber resilience. – Ir. Dr. Megat Zuhairy bin Megat Tajuddin, Chief Executive of NACSA.

The workshop provides a practical introduction to cybersecurity auditing in critical sectors, focusing on how organisations can navigate and implement cybersecurity compliance and requirements in practice. Participants will explore different auditing approaches (risk-based, compliance-based, technical and control-based methods) to learn how structured maturity assessment can help evaluate organizational resilience.

Programme begins with a one-day conference on 20 May 2026 involving high-level representatives from the Delegation of European Union to Malaysia, European Union member states, Malaysia’s government agencies and National Critical Information Infrastrcuture (NCII) sectors. The conference will focus on strengthening awareness and understanding of cybersecurity audit, compliance and risk management practices under the Cyber Security Act 2024 (Act 854) while also providing international perspectives on cyber resilience, governance and critical infrastructure protection.

Programme will also introduce key EU cybersecurity standards and principles while examining the operational realities of handling cyber incidents in critical infrastructure environments. Through industry insights and real-world cases, participants gain clearer understanding of how audits can drive continuous improvement and what concrete steps should be next once findings and gaps have been identified.

Following the opening conference, the second and third day of the program will transition into a closed technical workshop dedicated exclusively to NACSA officers.

Training will be conducted by three EU CyberNet experts:

• Christian Schlehuber, the CEO of Cybershield with an extensive experience in cybersecurity auditing, risk assessment and compliance programs.
• Ilmar Toome, Head of Supervision in the Estonian Information System Authority and is responsible for overseeing the implementation of cybersecurity measures in more than 5000 public and private entities in Estonia;
• Nick Small who is a cybersecurity strategic advisor and CSIRT auditor with over three decades of technology and business consulting experience across sectors.