Lock

CYBERSECURITY ACT 2024 (ACT 854) COMPLIANCE

Achieve Act 854 Compliance in 30 Days

Intelligence-grade cybersecurity for Malaysia's critical infrastructure operators

Lock

CYBERSECURITY ACT 2024 (ACT 854) COMPLIANCE

Achieve Act 854 Compliance in 30 Days

Intelligence-grade cybersecurity for Malaysia's critical infrastructure operators

Hero Image
Hero Image
Hero Image

NACSA Partner

NACSA Partner

34 Years CF Group

34 Years CF Group

NCII Certified

NCII Certified

Is Your Organization Ready for Act 854?

Is Your Organization Ready for Act 854?

The Cybersecurity Act 2024 mandates strict security requirements for NCII operators. Non-compliance carries severe penalties.

The Cybersecurity Act 2024 mandates strict security requirements for NCII operators. Non-compliance carries severe penalties.

WHAT IS ACT 854?

WHAT IS ACT 854?

Malaysia's Cybersecurity Act 2024 establishes mandatory security standards for critical infrastructure operators across 11 NCII sectors..

Malaysia's Cybersecurity Act 2024 establishes mandatory security standards for critical infrastructure operators across 11 NCII sectors..

WHO MUST COMPLY?

WHO MUST COMPLY?

Banking, energy, healthcare, telecommunications, government, water, transportation, and other NCII-designated organizations..

Banking, energy, healthcare, telecommunications, government, water, transportation, and other NCII-designated organizations..

ENFORCEMENT DEADLINES

ENFORCEMENT DEADLINES

Phased compliance deadlines starting Q2 2026. Initial assessments due within 90 days of designation..

Phased compliance deadlines starting Q2 2026. Initial assessments due within 90 days of designation..

PENALTIES

PENALTIES

Fines up to RM 500,000 or imprisonment up to 5 years. Directors personally liable for willful non-compliance.

Fines up to RM 500,000 or imprisonment up to 5 years. Directors personally liable for willful non-compliance.

Organizations are being designated NOW.

Organizations are being designated NOW.

Have you received your NCII notification?

Have you received your NCII notification?

Check Your Compliance Status

Act 854 Compliance Solutions

Act 854 Compliance Solutions

Three pathways to full compliance—tailored to your organization's size, timeline, and risk profile..

Three pathways to full compliance—tailored to your organization's size, timeline, and risk profile..

ASSESSMENT ONLY

RM 32,000

2 Weeks

Organizations needing to understand their compliance gaps before committing to full implementation.

Comprehensive Act 854 gap assessment

Current security posture evaluation

NCII sector-specific requirements mapping

Prioritized remediation roadmap

Executive summary report

90-day implementation timeline

Budget estimation for full compliance

Get Assessment

MOST POPULAR

RM 88,000

30 Days

Mid-size NCII operators requiring rapid compliance with core security controls.


Everything in QuickStart, PLUS:

Security policy framework development

Technical security controls implementation

Network segmentation & access controls

Incident response plan & procedures

Security awareness training

Vulnerability assessment & remediation

Compliance documentation package

NACSA submission preparation

6-month post-implementation support

Sign Up

COMPLETE TRANSFORMATION

RM 168,000

60 Days

Large enterprises requiring comprehensive security transformation with ongoing managed services.

Everything in Sprint, PLUS:

Advanced threat detection & response (SIEM/SOC)

Penetration testing & red team exercises

Data classification & DLP implementation

Backup & disaster recovery planning

Physical security integration

Third-party vendor risk assessment

Board-level security governance

24/7 SOC monitoring (12 months)

Quarterly compliance audits

Annual Act 854 recertification

Dedicated security advisor

Sign Up

Why Choose CID

Why Choose CID

Why Choose CID

NACSA PARTNERSHIP

"Official training partner of National Cyber Security Agency" • Government-endorsed methodologies • Direct NACSA liaison

NACSA PARTNERSHIP

"Official training partner of National Cyber Security Agency" • Government-endorsed methodologies • Direct NACSA liaison

NACSA PARTNERSHIP

"Official training partner of National Cyber Security Agency" • Government-endorsed methodologies • Direct NACSA liaison

Security Image

34-YEAR SECURITY HERITAGE

Part of CHICO FORCE Group -Malaysia's premier security conglomerate • Established 1990 • Trusted by government & Fortune 500

Security Image

34-YEAR SECURITY HERITAGE

Part of CHICO FORCE Group -Malaysia's premier security conglomerate • Established 1990 • Trusted by government & Fortune 500

Security Image

34-YEAR SECURITY HERITAGE

Part of CHICO FORCE Group -Malaysia's premier security conglomerate • Established 1990 • Trusted by government & Fortune 500

Security Image

PHYSICAL + CYBER INTEGRATION

"Unique ability to secure both digital and physical infrastructure" • Integrated OT security • Critical infrastructure specialization

Security Image

PHYSICAL + CYBER INTEGRATION

"Unique ability to secure both digital and physical infrastructure" • Integrated OT security • Critical infrastructure specialization

Security Image

PHYSICAL + CYBER INTEGRATION

"Unique ability to secure both digital and physical infrastructure" • Integrated OT security • Critical infrastructure specialization

Security Image

LOCAL EXPERTISE, GLOBAL STANDARDS

"Malaysian compliance met with international-grade security" • Deep local regulatory knowledge • ISO 27001, NIST frameworks

Security Image

LOCAL EXPERTISE, GLOBAL STANDARDS

"Malaysian compliance met with international-grade security" • Deep local regulatory knowledge • ISO 27001, NIST frameworks

Security Image

LOCAL EXPERTISE, GLOBAL STANDARDS

"Malaysian compliance met with international-grade security" • Deep local regulatory knowledge • ISO 27001, NIST frameworks

UPCOMING REQUIREMENT

UPCOMING REQUIREMENT

OT Systems Security Drill - October 2026

OT Systems Security Drill - October 2026

NACSA has scheduled a national Operational Technology (OT) security drill for all NCII operators in October 2026. CID is an official preparation partner. Are your industrial control systems (ICS), SCADA networks, and OT environments ready for the drill?


✓ NACSA-invited preparation partner

✓ OT security expertise (energy, water, manufacturing)

✓ Drill simulation & tabletop exercises available

Trusted by Malaysia's Critical Infrastructure
Trusted by Malaysia's Critical Infrastructure

Our happy customers

Our happy customers

CID's Act 854 Sprint program got us compliant in 28 days. Their NACSA partnership meant our submission was approved on first review.

Ahmad Rahman, CISO

Maybank

User Image

CID's Act 854 Sprint program got us compliant in 28 days. Their NACSA partnership meant our submission was approved on first review.

Ahmad Rahman, CISO

Maybank

User Image

CID's Act 854 Sprint program got us compliant in 28 days. Their NACSA partnership meant our submission was approved on first review.

Ahmad Rahman, CISO

Maybank

User Image

The CF Group heritage was crucial - CID understood our physical security infrastructure in ways pure-play cyber firms couldn't.

Dr. Sarah Tan, Director of IT

Private Hospital

User Image

The CF Group heritage was crucial - CID understood our physical security infrastructure in ways pure-play cyber firms couldn't.

Dr. Sarah Tan, Director of IT

Private Hospital

User Image

The CF Group heritage was crucial - CID understood our physical security infrastructure in ways pure-play cyber firms couldn't.

Dr. Sarah Tan, Director of IT

Private Hospital

User Image

QuickStart assessment identified gaps we didn't know existed. The roadmap was so clear, our board approved full Sprint implementation immediately.

Raj Kumar, Risk Officer

Energy Company

User Image

QuickStart assessment identified gaps we didn't know existed. The roadmap was so clear, our board approved full Sprint implementation immediately.

Raj Kumar, Risk Officer

Energy Company

User Image

QuickStart assessment identified gaps we didn't know existed. The roadmap was so clear, our board approved full Sprint implementation immediately.

Raj Kumar, Risk Officer

Energy Company

User Image

90%+ pass rate isn't marketing—it's reality. Our cohort achieved 94% first-attempt success. The residency program sealed the deal.

Sarah Lim

Fortune 500 Enterprise

User Image

90%+ pass rate isn't marketing—it's reality. Our cohort achieved 94% first-attempt success. The residency program sealed the deal.

Sarah Lim

Fortune 500 Enterprise

User Image

90%+ pass rate isn't marketing—it's reality. Our cohort achieved 94% first-attempt success. The residency program sealed the deal.

Sarah Lim

Fortune 500 Enterprise

User Image

As a government agency, we needed a partner who understood both compliance and national security. CID delivered on both fronts.

Tn Abdullah

Government Agency

User Image

As a government agency, we needed a partner who understood both compliance and national security. CID delivered on both fronts.

Tn Abdullah

Government Agency

User Image

As a government agency, we needed a partner who understood both compliance and national security. CID delivered on both fronts.

Tn Abdullah

Government Agency

User Image

The OT drill preparation was invaluable. When NACSA ran the exercise, we were the only facility that passed without remediation.

James Wong

Utility Company

User Image

The OT drill preparation was invaluable. When NACSA ran the exercise, we were the only facility that passed without remediation.

James Wong

Utility Company

User Image

The OT drill preparation was invaluable. When NACSA ran the exercise, we were the only facility that passed without remediation.

James Wong

Utility Company

User Image

Read All The Reviews On Trustpilot.com

Read All The Reviews On Trustpilot.com

Read All The Reviews On Trustpilot.com

Frequently asked questions

Frequently asked questions

Have more questions? Contact us.

Have more questions? Contact us.

Frequently asked questions

Have more questions? Contact us.

What makes CID's Act 854 compliance different?

We're an official NACSA partner with 34-year security heritage. Our methodologies are government-endorsed, and we maintain direct liaison with regulators.

How long does Act 854 compliance take?
What happens if I miss the compliance deadline?
Do I need to comply if I haven't received NACSA designation?
Does Act 854 cover both cyber and physical security?
Can CID help with the October 2026 OT drill?
What makes CID's Act 854 compliance different?

We're an official NACSA partner with 34-year security heritage. Our methodologies are government-endorsed, and we maintain direct liaison with regulators.

How long does Act 854 compliance take?
What happens if I miss the compliance deadline?
Do I need to comply if I haven't received NACSA designation?
Does Act 854 cover both cyber and physical security?
Can CID help with the October 2026 OT drill?
What makes CID's Act 854 compliance different?

We're an official NACSA partner with 34-year security heritage. Our methodologies are government-endorsed, and we maintain direct liaison with regulators.

How long does Act 854 compliance take?
What happens if I miss the compliance deadline?
Do I need to comply if I haven't received NACSA designation?
Does Act 854 cover both cyber and physical security?
Can CID help with the October 2026 OT drill?
Grid
Cta Icon
Cta Icon

Ready to Get Compliant?

Schedule your free Act 854 compliance assessment. No obligation. No sales pressure. Just expert guidance.

Confidential consultation. Your compliance gaps stay between us and NACSA—no one else.
Grid

Ready to Get Compliant?

Schedule your free Act 854 compliance assessment. No obligation. No sales pressure. Just expert guidance.

Confidential consultation. Your compliance gaps stay between us and NACSA—no one else.
Grid
Cta Icon
Cta Icon

Ready to Get Compliant?

Schedule your free Act 854 compliance assessment. No obligation. No sales pressure. Just expert guidance.

Confidential consultation. Your compliance gaps stay between us and NACSA—no one else.