- 5 November 2026
- 9:00am – 5:00pm (MYT)
- DoubleTree by Hilton Kuala Lumpur
EVENT OVERVIEW
Malaysia, one of the most targeted nations in the Asia-Pacific, now finds itself at the epicentre of escalating challenges as it accelerates toward its ambitious AI Nation 2030 vision. As Malaysia rapidly shapes its digital future, the cybersecurity decisions made today will determine who forges competitive advantage and who gets left exposed.
By 2027, global cybercrime costs are projected to reach USD 24 trillion, nearly three times today’s figure. Malaysia’s regulatory framework has now reached full operational strength, charting a decisive and forward-looking trajectory for the nation’s digital future. The Cyber Security Act is entering its enforcement maturity phase across eleven National Critical Information Infrastructure sectors. The Personal Data Protection (Amendment) Act (PDPA) has made Data Protection Officers, mandatory breach notification, and risk-based cross-border data transfer frameworks the new standard. Also, NACSA’s National Post-Quantum Cryptography Migration Plan outlines Malaysia’s transition to quantum-safe infrastructure through a 2027–2028 validation and pilot phase targeting government systems, financial institutions, and telco infrastructure.
As Malaysia’s MyDIGITAL Digital Trust & Data Security Strategy runs through 2030, AI sector investments reached RM13.29 billion in the first half of last year alone, and the ASEAN Digital Economy Framework Agreement targeting a 2026 conclusion will bind regional data flows, cybersecurity standards, and digital trade in ways that will shape enterprise security obligations for years to come.
The 2nd Annual FutureCISO Malaysia Conference 2026, themed “Forging Future Advantage“, brings together Malaysia’s senior cybersecurity leaders to look beyond today’s compliance requirements and build security functions that create genuine strategic advantage heading into 2027 and beyond. Critical topics to be covered this year include:
- Governing identity in the agentic AI era
- Preparing for autonomous adversaries
- Elevating the CISO to digital trust architect
- Lessons from real-world breach record
- Building AI and cloud security architectures that hold
- Navigating the evolving post-quantum and regulatory frontier
WHO SHOULD ATTEND?
CISOs, CTOs, Directors, Heads, MDs, SVPs, VPs, Leads, involved in:
- Information Security
- Cyber Security Architecture and Strategy
- Security and Technology Risk
- Cyber Security and Privacy
- Information and Data Protection
- Risk and Compliance
- Cloud Governance and Security
WHY YOU SHOULD ATTEND
The FutureCFO Conference aims to give CFOs, who also act as their company’s strategic business partner and catalyst, insights on ensuring corporate growth and successfully mitigating risks and challenges amidst the current economic and political uncertainties in their countries. The conference will also address strategies and best practices on how CFOs can reimagine finance functions and their organizations to survive and thrive in today’s fast-paced and digitally driven landscape.
This by-invitation only one-day event will gather over 120 senior finance leaders from multiple industries and offers the best opportunity to hear from the industry’s leading professionals, contribute questions from the floor, engage in incisive panel discussions that discuss real-life business cases, updates and strategies to meet the most pertinent challenges facing the finance function in 2020.
High-Level Industry Speakers
We gather 20+ industry speakers and experts from leading organizations for keynote presentations and incisive discussions so you can tap on their invaluable insights and best practices important to your finance function management and transformation.
Interactive Discussions
Be part of our interactive panel discussions that address the current hot topics, share ideas and experiences and get the answers to your pressing questions from prominent finance leaders on stage.
Networking Opportunities
Meet new business partners, engage and forge new connections with fellow finance and treasury leaders in the region, solution providers and many more at our event through luncheons, coffee breaks, one-to-one meetings and informal introductions.
Targeted In-Depth Sessions
8 hours of learning and networking opportunities packed into 10 in depth sessions. Listen to corporate-driven best practices and case studies sharing that are targeted to your profession through the personalized country-specific conferences we crafted for you - FutureCFO Conferences.
2026 AGENDA
09:00
Chairman’s Welcome Remarks
Allan Tan, Group Editor-in-Chief, Cxociety
09:15
Opening Keynote: Malaysia’s Cyber Vision for 2027: Strengthening National Cyber Resilience and Future Preparedness
As Malaysia accelerates its digital transformation journey, strengthening national cyber resilience has become essential to safeguarding critical infrastructure, maintaining digital trust, and supporting sustainable economic growth. This address will explore Malaysia’s cybersecurity priorities for 2027, examining the evolving threat landscape, emerging technologies, and the increasing sophistication of cyber threats. It will highlight the importance of proactive defence, effective governance, public-private collaboration, and a skilled cybersecurity workforce in building a secure and resilient digital ecosystem. Ultimately, the address will consider how Malaysia can move beyond reactive cybersecurity measures towards a forward-looking, coordinated, and future-ready national cyber resilience strategy.
YBrs. Ts. Wan Roshaimi Wan Abdullah, Chief Technology Officer, CyberSecurity Malaysia
09:40
Keynote: From Detection to Recovery: Extending Cyber Resilience to Agentic AI
AI agents can act on your data, not just advise on it. This session shows how CISOs can extend cyber resilience to agentic AI by discovering agent dependencies, protecting agent state, and recovering to a trusted point in time, helping meet Malaysian regulatory expectations while adopting AI with confidence.
Tam Chek San, Field Technical Director, Cohesity
10:05
Panel Discussion: Security Leaders as Digital Trust Architects – Leading from the Board, Not Behind It
The role of the IT security leader is undergoing its most significant redefinition in a generation. As personal liability under national’s legislation, board-level accountability for cyber governance, and the strategic weight of MyDIGITAL transformation converge, security leaders who wait to be asked are falling behind those who are shaping the agenda.
- Translating cyber risk into P&L and reputational impact
- Board-level cyber governance under the Cyber Security Act
- Security as a business enabler, not a cost centre
- Building a 2027-backwards security strategy
- From operator to digital trust architect
Moderator:
Allan Tan, Group Editor-in-Chief, Cxociety
Panelists:
Ts. Mohamed Nabil Zolkefly, Chief Information Security Officer, Takaful Malaysia
Ridzwan Mahdi, Cybersecurity GRC Professional, Telecommunication Industry
Azril Rahim, Senior Cybersecurity Manager, Tenaga Nasional Berhad
10:45
Morning Coffee Break & Networking
11:15
Keynote: Governing the Agentic Enterprise: Securing AI Agents at Scale
More than 80% of Fortune 500 companies already run active AI agents built with low-code and no-code tools, and IDC projects 1.3 billion agents in circulation by 2028. Agents are being built across the business faster than security teams can see them. Gartner projects that over 40% of agentic AI projects will be cancelled by the end of 2027, largely because of gaps in cost, value, and risk control.
As Malaysia moves toward its AI Nation 2030 vision under a maturing Cyber Security Act and amended PDPA, CISOs need to answer a new question: how do we govern and secure agents at scale? Agents act on their own, reach into sensitive data, and connect to systems and to each other. They need the same identity, oversight and control we already apply to people.
- Why agents should be governed as a new class of identity, not just a new application
- A governance and security framework for the full agent lifecycle
- How an integrated security platform brings agent identity, data protection and threat monitoring under one set of controls
Joshua McCloud, Senior Director, Head of Security Solutions – Southeast Asia, Avanade
11:40
Panel Discussion: Governing Machine Identities: When AI Agents Need Access
IAM is no longer just about people—it must now govern AI agents, service accounts, and automated workflows that act autonomously across enterprise environments. Malaysian organisations are discovering that traditional PAM tools and access frameworks were not built for entities that never log off. With PDPA’s new AI governance guidelines now in effect, establishing agent identity governance is no longer optional.
- Provisioning, governing, and de-provisioning AI agent access
- Where PAM tools break down with autonomous AI workflows
- Managing secrets sprawl in CI/CD pipelines and agentic architectures
- Accountability for AI security across the CISO, AI/ML, and platform teams
Moderator:
Ts. Yusfarizal Yusoff, President-Elect, International Society of Automation (Malaysia)
Panelists:
Sina Manavi, Global Head of Cloud Security and Compliance, DHL IT Services
Koh Ssu Han, Director, Identity Domain Consulting – ASEAN, Palo Alto Networks
12:20
Fireside Chat: Data Sovereignty and Cloud Architectures Strategy for Secured Digital Future
With sovereign AI cloud investments and data centre growth, Malaysian CISOs navigate complex sovereignty, BNM, and regulatory demands. This panel addresses practical data residency, multi-cloud security, sovereign options, and architectures that balance today’s requirements with adaptability through 2027 and beyond.
- Operationalising data sovereignty in cloud and AI environments.
- Multi-cloud security posture management for distributed enterprises.
- Evaluating sovereign cloud capabilities and gaps in Malaysia.
- Aligning architectures with PDPA, Cyber Security Act, and BNM RMiT.
- Future-proofing for ASEAN DEFA (Digital Economic Framework Agreement) and AI-driven workloads
Interviewer:
Allan Tan, Group Editor-in-Chief, Cxociety
Interviewees:
Mohammed Hashim, Business Information Security Officer, Palmgroup
Goh Ser Yoong, Chief Information Security Officer, Ryt Bank
12:45
Networking Lunch
13:45
Fireside Chat: From Alerts to Action: Operationalising Risk Prioritisation
Malaysian security teams are drowning in signals. The average enterprise SOC processes thousands of alerts daily, yet the most dangerous exposures are often not the loudest ones. As attack surfaces expand across cloud, OT, and agentic AI environments, the ability to cut through noise and act on what genuinely matters has become one of the defining operational competencies separating resilient organisations from reactive ones.
- Moving from CVSS scores to business-context risk scoring
- Practical exposure management under real-world constraints
- Communicating risk decisions to boards and audit committees
- Aligning threat intelligence to remediation capacity
- Closing the gap between what you know and what you can fix
Interviewer:
Allan Tan, Group Editor-in-Chief, Cxociety
Interviewees:
Ts. Yuwanthiran Sukalingam, Director of Information Security, Mindvalley and Chairperson, CSAMY (Selangor Chapter)
Serena See, CIO, TGV Cinemas
14:10
Panel Discussion: Shadow AI, Rogue Models, and the Insider Risk Nobody Is Talking About
Rapid unsanctioned AI tool adoption in Malaysian enterprises creates significant data leakage and insider risks via LLMs and rogue models. This operational panel discusses discovery, policy enforcement, behavioural monitoring, DLP for prompts, and building AI-aware culture ahead of the AI Governance Bill and Digital Trust Strategy formalisation.
- Scale of shadow AI and unsanctioned tools creating visibility blind spots.
- Detecting and containing data exfiltration through LLM prompts.
- Managing rogue/third-party AI models and associated risks.
- Developing effective AI usage policies and behavioural controls.
- Fostering a security-aware AI culture aligned with emerging governance
Moderator:
Dr. Waqas Khalid Obeidy, Head of Research & Development, CISO Office, Payments Network Malaysia (PayNet)
Panelists:
Ts. Dr. Prasad Jayabalan, Head of Cybersecurity Strategy & Architecture, Axiata
Frashad Shah, Head, Governance, Risk & Compliance, Digital Nasional Berhad
Liew Kah Wee, Enterprise Architecture & Cybersecurity Lead, Wasco Berhad
14:50
Panel Discussion: The Human Factor — Why Social Engineering Is Still Winning against Malaysia’s Best-Defended Organisations
An unscripted conversation on why phishing, vishing, and manipulation-driven social engineering continue to bypass even the most sophisticated security investments in Malaysian enterprises and what CISOs are doing differently to address the one vulnerability no technology can fully patch: people. No matter how advanced your security tools are firewalls, EDR, SIEM, zero trust architecture none of them can fully eliminate the risk that comes from human behaviour.
- Human risk as a security metric
- The illusion of the aware employee
- How social engineering attacks are exploiting fundamental human cognitive biases
- Successfully deploying human‑centric cybersecurity design in 2027
Moderator:
Allan Tan, Group Editor-in-Chief, Cxociety
Panelists:
Jairam Ramesh, Director of Cyber Security, AIA+
Wan Norashikin Mohd. Nasir, Head of Group Risk & Assurance, Renewable Energy Industry
Evenjonly Ng, GIS Domain Lead, UOB
15:30
Chairman’s Closing Remarks
15:35
Afternoon Coffee Break
16:05
End of Conference
2026 SPEAKERS
Speaking Opportunities:
- Christine Tan
- christinetan@cxociety.com
WHY SPONSOR
We will help you GENERATE quality business leads.
We will help you INCREASE your regional profile.
We will help you CREATE new business opportunities.
- Get cost-effective marketing exposure and branding to your target audience, culminating in face-to-face meetings with your prospects.
- Position and profile yourself as an industry leader.
- Increase your brand recognition.
- Create new partnerships and alliances.
- Develop relationships through new virtual networking opportunities.
- Showcase new products and services to a targeted audience of decision makers.
- Get direct and exclusive access to Key decision-makers
Sponsorship Opportunities:
- Perry Zhao
- +65 9298 6097
- perryzhao@cxociety.com





















































