Artificial intelligence (AI) is accelerating that reality, making it easier for cyber attackers to detect vulnerabilities, create convincing phishing activities and launch attacks with much greater speed.

Telekom Malaysia’s Chief Information Security Officer Raja Azrina Raja Othman, a co-founder of MyCERT in 1997, says the nature of cyber threats has changed drastically since those early days.

Three decades ago, cyber threats were more likely to target specific systems and networks. Today, almost every service operates digitally and is interconnected, ranging from banking and government services to corporate operations and critical infrastructure.

“When a cyberattack occurs, the impact is no longer simply a system being disrupted. It can affect operations, finances, customer data, reputation and even services used by the public,” she explains.

The speed at which attacks can take place has also increased at an alarming pace.

“With AI, cyber attackers can easily identify where an organisation is weakest, produce more convincing phishing activities and launch attacks much faster – sometimes remaining undetected for long periods of time.

“Cyber defence can no longer rely on manual processes alone,” she advises.

For organisations and the government sector, the challenge is compounded by increasingly complex information infrastructure and the growing number of systems, platform and application integrations.

When IT planning and information security planning do not move in tandem, the risk of exposure to security threats increases.

Yet some organisations still regard cybersecurity as an option rather than a necessity. Raja Azrina argues that this needs to change and quickly.

“The reality is that cybersecurity risk is a business risk. If a core system is affected, can the organisation continue to operate? Can they continue to provide services to customers? And how will it impact confidence in their business?

“These are the questions organisations need to consider. Cyber risk needs to be a top management and board room conversation. It involves embedding cyber security requirements into organisational governance, not simply remain an IT checklist,” she advises. Cybersecurity investment, she adds, should be guided by a risk-based approach, with spending prioritised to address the risks involved and their potential impact on the organisation’s business.

Even then, investment does not guarantee an attack will be prevented.

“What differentiates organisations that are truly prepared is how early they can detect a threat, how quickly they can respond and how effectively they can recover to minimise prolonged disruption to operations.

“In cybersecurity, we cannot wait until a crisis occurs before deciding who needs to act,” she warns.

Cybersecurity is not a new area for TM. Raja Azrina says it has long formed part of the company’s responsibility in operating and protecting the country’s digital infrastructure.

“TM’s cybersecurity capabilities have been built through years of experience in protecting our own operations as well as supporting the digital needs of enterprises and government, including networks, cloud, data centres and applications,” she shares.

The company’s teams continuously monitor security across a broad and complex digital environment.

TM’s local cybersecurity specialists are continuously trained in areas including threat detection and monitoring, threat hunting, incident response and digital forensics.

Based on its experience, Raja Azrina says cybersecurity monitoring and controls need to be applied at every level of the network, infrastructure, system and applications, creating layered controls, strengthening the effectiveness of detection and response.

“In cybersecurity, we cannot wait until a crisis occurs before deciding who needs to act,” she warns.

For organisations, the question today is no longer whether they will use AI, but whether they can use it safely while maintaining the trust of customers and the public.

The TM Cyber Defence Centre (TM CYDEC) is designed around this need, providing an integrated view of cyber threats across networks, cloud platforms, applications and digital infrastructure.

Its aim is to help organisations detect threats early, respond faster and reduce potential disruption to critical operations.

“As organisations adopt AI, they face emerging risks related to data exposure, governance, model integrity and regulatory compliance. This makes integrated threat visibility and cyber resilience across digital environments increasingly important,” Raja Azrina says.

Through its Cyber Fusion operating model, TM CYDEC brings together security monitoring and capabilities across connected digital environments, supported by 24/7 threat intelligence.

Correlating security information across diverse platforms and services provides a broader view of potential threat activities, enabling security response teams to assess threats from different contexts.

This empowers more informed decisions, focuses security attention and resources, and helps organisations strengthen their ability to detect, respond to and recover from cyber incidents.

Raja Azrina explains the objective is not simply to defend against individual attacks, but to help organisations identify and respond to threats earlier and reduce their impact on business.

“We believe that with the right cybersecurity strategy, a risk-based approach, as well as effective services and technology, we can help organisations detect and respond to cyber threats earlier and reduce the impact on business.

“Ultimately, we want organisations to be able to continue innovating and harnessing AI with confidence, without compromising security and trust,” she concludes.

To learn how TM One can support your organisation’s digital transformation priorities, contact TM One for more information.