Malaysia only Asean country at highest tier for post-quantum cryptography readiness - Zahid

KUALA LUMPUR: Malaysia has been recognised as the only Asean country to achieve Tier 1 status for post-quantum cryptography (PQC) migration readiness, reflecting its preparedness to address future cybersecurity and technological challenges.

Deputy Prime Minister Datuk Seri Dr Ahmad Zahid Hamidi said the recognition was based on the Asean Post-Quantum Cryptography Readiness 2026 report, amid efforts to reduce the country's reliance on foreign technology through the development of local expertise and capabilities.

He said these efforts included the establishment of Cyber Security and Cryptology Development Centre Bhd (CSCDC) and the implementation of the National Cryptography Policy (MyKriptografi).

"These initiatives focus on developing expertise, research and innovation, as well as producing trusted local cybersecurity and cryptographic technology solutions to meet the country's strategic security needs," he said in a written reply published on the Parliament website.

He was responding to a question from Tan Sri Abdul Hadi Awang (PN-Marang) on the level of technological sovereignty in the country's strategic security systems and the government's plans to reduce dependence on foreign technology, software, systems and expertise.

Zahid said the development of a Sovereign AI Cloud was another initiative to strengthen data sovereignty and protect strategic technologies, ensuring that critical national data was safeguarded in accordance with domestic security requirements and laws.

"The government adopts a technology-agnostic approach, allowing strategic cooperation with various technology providers while prioritising local capabilities and reducing the risk of dependence on any single foreign provider.

"These efforts will be implemented in stages to enhance the country's ability to independently assess, control, manage and protect strategic security systems," he said.

He said the government, through the National Cyber Security Agency (NACSA), had developed the Malaysia Cyber Security Strategy (MCSS) 2025-2030 to strengthen national cybersecurity and resilience, including through the development of local expertise.

The implementation of the Cyber Security Act 2024 also provides a legal framework for stronger cybersecurity governance and the protection of National Critical Information Infrastructure (NCII), he said.