Scene 1

September 2021 Ts. Dr.  Zahri   Yunos ,  Chief Operating Officer Lt Col  Sazali  Bin  Sukardi  (Retired), Senior Vice President of Strategic Research Lt Col Mustaffa Bin Ahmad (Retired) C|CISO,  Senior Vice President of Outreach and Capacity Building Ts. Lee  Hwee   Hsiung ,  Head of Cyber Security Professional Development

Scene 2

The copyright of this training program material, which may contain proprietary information, is the property of  CyberSecurity  Malaysia. The training program material should not be disclosed, copied, transmitted or stored in an electronic retrieval system, or published in any form, either wholly or in part without prior written consent. © CYBERSECURITY MALAYSIA, 2021 Registered office:  Level 7, Tower 1 	         Menara Cyber Axis 	          Jalan Impact 	          63000 Cyberjaya, Selangor 	         MALAYSIA Registered in Malaysia – Company Limited by Guarantee Company No. 726630-U Disclaimer The information, related graphics, materials and others contained in this training program material is for training purposes only. While we strive to keep the information up-to-date and correct at all times, we make no representations or warranties of any kind, express or implied, about the completeness, accuracy, reliability, suitability or availability with respect to the information, or related graphics contained herein for any purposes. Hence, any reliance you place on such information, products, services, related graphics and others is therefore strictly at your own risk. All such information, products, services, related graphics and others are provided "as is" without warranty of any kind.  CyberSecurity  Malaysia hereby disclaims all warranties and conditions with regards to the information, products, services, related graphics and others mentioned. In no event will  CyberSecurity  Malaysia be liable for any loss or damage including without limitation, indirect or consequential loss or damage, or any loss or damage whatsoever arising from loss of data or profits resulting from the use or in any way connected with the use of these documents.

Scene 3

Ts. Dr.  Zahri  Bin  Yunos   Chief Operating Officer CyberSecurity  Malaysia Ts. DR. ZAHRI HJ YUNOS is the Chief Operating Officer of  CyberSecurity  Malaysia, an agency under the Ministry of Communication and Multimedia, Malaysia.   Zahri  holds a PhD in Information Security from the  Universiti   Teknikal  Malaysia Melaka ( UTeM ), Melaka, Malaysia.   Zahri  also holds a Master’s degree in Electrical Engineering from the  Universiti   Teknologi  Malaysia, Malaysia and a Bachelor’s degree in Computer Science from the Fairleigh Dickinson University, New Jersey, USA.  He is a certified Associate Business Continuity Professional by the Disaster Recovery Institute International, USA.   Zahri  has been awarded Senior Information Security Professional  Honouree  in July 2010 by the (ISC)2, USA.  He has contributed various publications and presented papers on topics related to cyber security, cyber terrorism and business continuity management.

Email: 	 zahri@cybersecurity.my   Website:  www.cyberguru.my

Scene 4

Lt Col  Sazali  Bin  Sukardi  (Retired) Senior Vice President Strategic Research CyberSecurity  Malaysia He holds Master of Science in Information Security from Royal Holloway, University of London, Master of Arts in  Defence  Studies from King’s College, University of London, Post Graduate Diploma in System Analysis from  Universiti   Teknologi  MARA (UiTM), and Bachelor of Science in Civil Engineering from University of Hartford, Connecticut, USA. He was also a staff college graduate from the Joint Services Command and Staff College, Shrivenham, United Kingdom. He has served the Malaysian Armed Forces before joining  CyberSecurity  Malaysia in 2009. His current post deals with cyber security strategic studies that include the exploration of suitable strategic initiatives, formulation of new policies, and initiation/coordination of research programs. He was the Leading Co-Chair of the Council for Security Cooperation in Asia Pacific Study Group on Cyber Security (2010-2012), and he has been representing Malaysia in several international discussion forums and organizations namely ASEAN Regional Forums and ASEAN Senior Official Roundtables in Cyber Security. Currently, he is a part-time lecturer at  Universiti   Kebangsaan  Malaysia in MSc Cyber Security and a guest lecturer at the Malaysian Armed Forces  Defence  College since 2012. He used to lecture at the Malaysia Armed Forces Staff College under the executive program by  Universiti   Pertahanan  Nasional Malaysia (2012-2014), and  Universiti   Teknologi  Malaysia in MSc Information Security (2009). He has also served as an industry panel for several Malaysian universities in information security and cyber security programs.

Email: 	 sazali@cybersecurity.my   Website:  www.cyberguru.my

Scene 5

Lt Col Mustaffa Bin Ahmad (Retired) C|CISO  Senior Vice President  Outreach   &   Capacity   Building CyberSecurity  Malaysia Lt Col Mustaffa bin Ahmad (Retired) C|CISO  psc  is the Senior Vice President, Outreach and Capacity Building Division of  CyberSecurity   Malaysia (CSM) – an agency under the purview of Ministry of Communications and Multimedia Malaysia. Prior to joining CSM in 2007, he has served more than 18 years in the Malaysian Armed Forces in various capacities including a stint as a United Nations Military Observer in Western Sahara, Africa and his last post was the Commanding Officer of the 6th Battalion of the Royal Malay Regiment. He holds a Bachelor and Master’s degree in Mass Communications and Political Science from the University of Wisconsin-Superior, USA, a Post Graduate Diploma in Strategic Studies from University Malaya, and a graduate of the prestigious Malaysian Armed Forces Staff College. Mustaffa spearheads  CyberSecurity  Malaysia’s Outreach and Capacity Building Division and contributed his thoughts towards cyber safety awareness and education program, targeting children, parents, teachers, students, and  organisations . His current position requires him to utilize his strong management skill and vast experience to plan and administer the overall training programs to ensure CSM is equipped with up-to-date professional training modules. He helped develop the Global ACE Certification Project which was named as the World Summit on the Information Society Prizes (WSIS Prizes) 2020 Winner at the WSIS Forum 2020 in Geneva, Switzerland recently. Mustaffa has been recognized also as a leader in internet safety and digital citizenship where he has been invited on various panels in forums and conferences, created modules and national school’s discourse competition with the Ministry of Education. He has appeared in numerous radio and TV talk shows to instill acculturation of cyber security among Malaysians. Mustaffa is also a Certified Chief Information Security Officer (C|CISO) and is a proud father of five children.

Email: 	 mus@cybersecurity.my   Website:  www.cyberguru.my

Scene 6

Ts . Lee  Hwee   Hsiung   Head, Cyber Security Professional Development  Outreach   &   Capacity   Building CyberSecurity Malaysia Honoree for Asia-Pacific Information Security Leadership Achievements (ISLA), (ISC)2 One of the most outstanding Chief Security Officers (CSO) in the  ASEAN region 2012, CSO ASEAN Awards. Certifications: Professional Technologist ( Ts ), Malaysia Board of Technologist ISMS Lead Auditor, BSI Associates of Business Continuity Professional, DRII Certified Ethical Hacker, EC-Council Key Responsibilities: Cybersecurity capacity building Global Accredited Cybersecurity Education Certification (Global ACE Certification), Architect & Manager National University of Malaysia (UKM), Associate Fellow

Email:  hh.lee@cybersecurity.my Website:  www.cyberguru.my

Scene 7

Chapter 1:  Cyber Security –  The New Frontier

Scene 8

Learning Outcomes Understanding the growth of Cyber Security and the human relationship From human safety to security; From operation disruption to cyber warfare Understanding your roles and responsibilities Understanding the basic of Cyber Security  Appreciate and discuss about the new security frontier Threats – Cyber threats; Weaknesses – vulnerabilities; Cyber crimes; cyber warfare; cyber terrorism; cyber espionage;  Basement programmers; state actors; non-state actors;  Rules and regulations

Contents Training & Capacity Building Introduction The Human Factors & Motivations The Needs of Cyber Security Capacity Building The Cyber Security education framework  Malaysia’s Cyber Security Personnel Requirements Q & A

Scene 9

1997 Malaysia Computer Emergency Response Team or MyCERT as a unit under MIMOS Berhad

2001 National ICT Security & Emergency Response Centre (NISER) as a department in MIMOS Berhad

2007 NISER was officially registered as CyberSecurity Malaysia CyberSecurity Malaysia was launched by YAB Prime Minister

2018 Cabinet Meeting decided CyberSecurity Malaysia report to the Ministry of Communication and Multimedia (MCMM)

2005 The Cabinet decided for NISER to be spun-off from MIMOS Berhad as a separate entity under Ministry of Science, Technology and Innovation (MOSTI)

Scene 10

INDUSTRY & RESEARCH DEVELOPMENT Research & Development Cyber Security Industry Engagement & Collaboration

OUTREACH & CAPACITY BUILDING Outreach & Awareness Competency Training Professional Certification

Scene 11

SOFTWARE
SPECIFIC
COMPETENCIES TEACHING i
TRAINING
SKILLS

Training Tell you what I know! Ends when session ended Capacity Building “Knights of the round table” cross information sharing, & moderation End of Session is the beginning

Scene 12

To nurture cyber security knowledge groups and/or individuals that are resilient to cyber security incidents

To nurture cyber security practitioners that are technically capable and proficient in the operation;

To nurture cyber security professionals that are capable in strategizing, planning and executing cyber security initiatives

Global ACE Scheme https://www.cybereducationscheme.org

Cyber Security Capacity Building Framework

Scene 13

Technology Cycles Have Tended to Last Ten Years
Mainframe
Computing
1960s
Mini
Computing
1970s
Personal
Computing
1980s
Desktop Internet Mobile Internet
Computing
1990s
C.oc*k
Computing
2000s
Wearable /
Everywhere
Computing
2014+
Others?

- Wireless  - Social Networks  - Bring Your Own Device (BYOD) - Cloud Computing

Scene 14

Digital services; Artificial Intelligence; Manufacturing; Internet of Things (IOT); Robotics; Automations; Cloud Computing; Smart Cities; ……

Almost everything can be done online: Chat online; Share online; Work online; Shop online; Banking online; and Live online. Information overload. High dependency on computers and the internet.

Scene 15

Source (ISC) 2  Cybersecurity Workforce Study 2020

ITU GLOBAL CYBER SECURITY INDEX 2020 - Malaysia is ranked 5 th . in Global Ranking

Problem Statements Shortage of cyber security personnel capable in mitigating cyber-attacks and reviving business operation.  The needs of effective programmes to ensure adoption of cybersecurity expertise with the right knowledge, skills, attitude and experience continuously.

Scene 16

Collaborative Network
Collaborative Networks
REALITY CHECK
INDUSTRY GROWTH
CHALLENGES
INDUSTRY-DRIVEN
STRATEGIC PLANNING
Source: ASM Nto. 2017
SOANO-DRIVENR&O
SHAREO
VISION
OUTCOMES
KNOWLEDGE
CLUSTERS
TALENT HUB
DISRUPTIVE
INNOVATION

We need a Collaborative Network to Bridge the Innovation Learn, Unlearn, Re-learn, Co-learn & Co-create From Jobs to Roles Job seekers to Job creators

Scene 17

Scene 18

Top 5 Cybersecurity Facts, Figures, Predictions, And Statistics For 2019 To 2021

2. Cybersecurity spending to exceed $1 trillion from 2017- 2021.

3.  3.5 million unfilled cybersecurity jobs by 2021

1.  Cost of cybercrime will exceed $6 trillion annually by 2021- up from $3 trillion in 2015 –  Estimated by Cybersecurity Ventures

Cyber crime damages will cost the world $6 trillion annually by 2021, up from $3 trillion in 2015. This represents the  greatest transfer of economic wealth in history , risks the incentives for innovation and investment, and will be more profitable than the global trade of all major illegal drugs combined.

Scene 19

MALAYSIA IS DRIVEN BY DIGITAL TECHNOLOGY  - Bringing Along New Technologies That Come With New Security Issues

JAN
2020
MALAYSIA
THE ESSENTIAL HEADLINE DATA you NEED TO UNDERSTAND THE STATE OF MOBILE. INTERNET, AND SCCIAL MEDIA USE
TOTAL
32.16
MILLION
URBANISATION:
760/0
MOBILE PHONE
40.69
MILLION
vs. POPULATION:
127%
INTERNET
26.69
MILLION
PENETRATION:
83%
GSMA
scx•.AL sty APR Aovur,SNG r_-ocs
AND Au LA.•ssr AVAILABU WA 2020 COMPARANUTY ADVISORY: BASE CHANGES
ACTIVE soaAL
26.00
MILLION
PENETRATION:
Hootsuite
are
social

Malaysia pushes to become a 'digital nation'
maoa

Scene 20

Top 3 highest incidents reported for the past 5 years : Fraud Intrusion Malicious Code

Chart, box and whisker chart

Description automatically generated

Cyber security Incident Statistics (MyCERT)

Chart

Description automatically generated with medium confidence

MALAYSIA COMPUTER EMERGENCY RESPONSE TEAM (MyCERT) INCIDENTS REPORT

Scene 21

Cybersecurity strategies to be fully integrated into National & organizational strategy from the start

Cyberattacks far more extensive effects than ever before

Everything connected, Cut across all vertical sectors

Brings with it a new operational risk: CYBER

Physical Threats Cyber Threats THE 4 TH  INDUSTRY REVOLUTION 31 Oct 2018 – Industry4WRD

Scene 22

Minds of Cyber Criminals  Motives – Driving factors  Benefits Cost of operation Focus on one operation Principle of easiest penetration Less worry about the legal risk

Scene 23

Immediate step is to strengthen the  “Human Capabilities”!

In order to be  relevance, competitive and resilience  in today's fast moving information security landscape, security personnel are required to  constantly train and re-train  upgrading their skills and knowledge while  keeping abreast with the latest changes   in the global information vectors.

4.0 The Needs of Cyber Security Capacity Building

Scene 24

Adoption of  holistic approach  that  identifies potential threats  to organization   AND to   develop the nation to become   cyber resilience  having the  capability to safeguard the interests  of its  stakeholders, reputation, brand and value creating activities

• Public Awareness
• High Competent People
— Certified [Qualified
Staff (Internal &
External Resources)
• Acts, Rules, Regulations,
Directives & Mandates
• Principles & Framework
Technology
People
Policye
Process
• Latest, trusted &
reliable equiprnent/
tools/software
• Standard Operating
Procedures, Best
Practices & Guidelines

Scene 25

Scene 26

THE Global Accredited Cybersecurity (ACE) Education  Scheme

Cyber security domains Professional certification approaches Requirements of professional memberships  Independent assessments Impartiality of examinations Competencies of trainers Professional’s development action plans

Code of Conducts Experiences & Skills Professional Certs Continuous Learning Educations

Examinations Impartiality  Trainers Competencies Independent Assessments

Governance Risks Compliance Digital  Forensic Security Assurance Cryptography Incident  Handling &  Response Leadership Customer  Services Partnership  & Coalitions Industry Innovations Mentoring  & Coaching Communications Strategic  Thinking Change  Management Organizational Management Information Management Financial Management Entrepreneurship

Process Skills People  Skills Industry Acumen Skills Cyber  Security Technical Cyber Security Management

Generic Competencies Cyber Security Education Domains Technical Competencies

A holistic  framework of cyber security professional certification  that outlined the:

5.0 The Cyber Security Education Framework

Scene 27

WINNER FOR THE WSIS PRIZES 2020 CATEGORY 5 BUILDING CONFIDENCE AND SECURITY IN THE USE OF ICTS 7 Sept 2020

A screenshot of a cell phone

Description automatically generated

Scene 28

Developing professional certification programme that is recognized globally; Establishing quality cyber security education for all to build an inclusive, equitable and ethical community; Realizing a common platform of cyber security capacity building and lifelong learning within Malaysia, OIC and the ASEAN region;

Evolving in parallel with technology  Adopting holistic strategy and  effectively applying cyber security innovative features and techniques Strengthening Public-Private-Academia Partnership and International Collaboration through mutual recognition arrangement

Global Quality Indigenous Professional Certification Programs Competence & Equitable Professional Education Common Continual Development Platform

Scene 29

Global ACE Scheme COE Recognition Arrangement allow mutual recognition of certified cyber security professionals, which create value for cyber security industry and participating countries.

Professional Examinations Professionals Credential Registered Trainers Registered Training  Programs Knowledge, Skills & Attitude

Global ACE Scheme COE  Mutual Recognition Areas

Scene 30

Human is the best investment for FIREWALL User Protection

Ministries, Agencies, Industries & Universities Economic Development

Standards in all economic sectors particularly on Information Technology, Communications and Multimedia Standards is regarded as a  strategic tool  in relation to

Scene 31

6.0 Malaysia Cyber Security Personnel Requirements

No of Cyber Security knowledge workers as of  end December 2020: 12,083 Malaysia Digital Economic Blueprint (MyDigital) Thrust 4, Strategy 3, Initiative 11: The  target is to develop 20,000 cybersecurity knowledge workers by 2025.

Discussion/Class Exercise: What are the possible strategies to raise the number of Cyber Security knowledge workers in Malaysia? Where are they coming from? How can they help our country?

Scene 32

4) People challenges (Man-Behind-the-Machine)

Scene 33

http://cybersecurityventures.com/cybersecurity-market-report-q3-2015/

Web, Mobile, Application, IOT, Open Source, Cloud Security

Scene 34

Chapter 2:  Fundamental of Cyber Security

Scene 35

By the end of this module, participant will be able to: Understand about the important components of Cyber Security Discuss about the CIA, Threats, Vulnerability & related matters Discuss about the important of CyberSecurity at work

Cyber Security Guiding Principles Vulnerabilities & Threats Stages of Cyber Security Mitigation Cyber Security at workplace Cyber Crimes Common Cyber Threats Anatomy of Cyber Attacks Cyber Security Issues and Challenges Q & A

Scene 36

C.I.A Confidentiality Integrity Availability We want our information to: Be confidential. Readable by the right people only; Have integrity. Can be altered by authorised people or processes; Be available. Accessible by authorised people only. Additional concerns on the security of online communications: Authentication. Information/messages are authentic, came from the correct person we acknowledged. Non-repudiation. Senders cannot deny knowledge of sending the message or performing some online activities, at some later point in time.

Scene 37

Process
What is a process?
A process can be defined as a structured set of activities
to accomplish a specific objective. A process takes one or more
defined input and turns it into a defined output.
A typical process will include the following components:
Activities
Procedures
Work Instructions
Metrics
Roles
Improvements

People — The Human Factor
The 'human factor' has to be addressed at
two key levels:
Non—technical staff —
must have up-to-date awareness
of their role in preventing and reducing cyber threats.
Technical staff — must have broad, up-to-date cyber
security skills, competency and qualifications.

Technology
Technology is a key element in achieving effective cyber
security for any organisation.
Many Of the key technical cyber security controls are summarised
in the UK government's 'Ten Steps To Cyber Security' framework.
Home and Mobile Working
• Managing User privileges
• Removable Media Controls
Secure Configuration
• Malware Protection
• Network Security
Applying the secure baseline
build to all devices is the
minimum you should be doing.
More importantly, you have to
ensure data is protected both in
transit and at rest.

Protect • Comply • Thrive
www.itgovernance.co.uk

Scene 38

Vulnerability : Weaknesses in a systems & operations  that is susceptible to harm, degradation, or destruction on being exposed to a hostile agent or factor.  Characteristics or parameters of the systems & operations that  allow attack to take place . Systems and operations include but not limited to  People, property, resources, ICT systems, cultural, economic, environmental, social activity etc. Examples: No password Obsolete software Un-patched solutions No backup No awareness

Threats : Possible dangers  that might exploit vulnerabilities to breach security and cause harm Examples: Social engineer Sabotage Fire Virus Malware Intruders

Threats can be managed but can’t be eliminated Vulnerabilities can be mitigated and probably eliminated

Scene 39

nologies
ncement
and
(ergence
ANALYTICS
ARTIFICUL
A1-GMENTED
MATERIALS
AUTONOMOUS
ADDTIVE
MMUFACWMNG
INTERNET
TTHNGS(IOT)
Enabling
Technologies
The digitalisation of the
production-based industries are
driven by these technological drivers

Scene 40

Scene 41

The most crucial process Evidence preservation and handling must comply the technical and legal requirements

Scene 42

A. Proactive Stage 1. Prepare 2. Harden/Secure B. Reactive Stage 1. Detect 2. Response C. Enhancement Stage 1. Improve Re-hardened  3. Detect

A proper defense layer takes into account; systems with direct and indirect internet exposure, systems with communication capabilities and systems deployed at individual terminals. Defense-in-Depth concerns on: Perimeters Internal network Human factors

Scene 43

Scope Objectives Designs Protocols; such as the Internet Protocols, TCPIP Routers Firewalls Intrusion Detection Systems (IDS) Intrusion Prevention System (IPS) VPN Traffic flows & controls Ethernet & connectivity Network access controls Etc. Processes Others.

Scene 44

End-point security Desktop software solutions Personal firewall Anti-virus Configuration management Users privilege management Audits Others.

Scene 45

Policies  Authority Scope Clarity Processes & procedures Awareness Training

Scene 46

Malware Attacks and Cyber Security Defenses

A large number of enterprises had breaches over the past year. What can be done to better protect the network against these cyberthreats?

Reactive Proactive Predictive md5/URL blacklists Heuristics/ protocol analysis Malware attribution Static/ behavioral and predictive analytics

Researches , analysis, collaborations , Strategies etc.

Awareness & Training Security Management Security Assessment

Scene 47

Effective  combination  of  Cyber Threats  and  Vulnerabilities  rooted the rise of Cyber Crime Cyber Crime is the use of ICT for criminal offenses Cyber Crime is rapidly changing its states and become more sophisticated Cyber crime are organized, global & can be very serious Happens to  ANYONE, ANYWHERE & ANYTIME

Scene 48

Protect company/enterprise, customer & employee data online 5 key steps*: Strengthen your computer’s defenses. Keep you network servers updated Use an updating mechanism or system that would update all computers in the network automatically when new updates are available. Set your computer OS and security applications (anti-virus, anti-spyware, firewalls) to update automatically. Use a Internet firewall. Avoid downloading malicious software. Never open an e-mail attachment from someone you don't know. Avoid opening an e-mail attachment from someone you know, unless you know exactly what the attachment is.  Protect company data and financial assets. If a computer is infected, isolate the infected computer from the network. If malicious code exploit one of more of the network services, block access to that service until it is rectified. Create strong passwords and keep them private. Guard data and devices when you’re on the go.

* Ref: Microsoft Security, Top Tips for Internet Security at Work

Scene 49

Phishing Malware Scam Advanced Persistency Threats (APT) DDoS

https://encrypted-tbn1.gstatic.com/images?q=tbn:ANd9GcRstxm0znIgxiRG-DcDhUf_WxG3D_5QA_qn2tHEMc8i-5KoG3ElQQ

010010C01 to 101 '01
010101'
•001000cm1110'1
110000100C01co
•1000010TOT1
0K. threat
'0011011
I ccnoloc«oc'

Scene 50