Diesel Abuse Raid Operation was carried out on 12 – 14 November 2013. It is one of the support services provided to Law Enforcement Agencies in the form of digital forensic examination.

Identifying organisations and individuals allegedly involved in diesel abuse in the northern region of Peninsular Malaysia is one of the digital forensic assistance accorded to investigation officers during raids and digital forensic examinations on exhibits involved in the investigations.

Assistance provided by CyberSecurity Malaysia through digital forensic experts has helped the law enforcement agencies in their investigations when it involves digital forensic at crime scenes and during raids.

OIC-CERT is cooperation amongst the OIC countries in the field of cyber security. To date, members of OIC-CERT consist of 24 computer emergency response teams (CERT) or cyber security relevant agencies from 19 OIC countries, 3 commercial companies, one professional and one honorary member from the field of cyber security.

Since OIC-CERT’s official inception in 2009, the cooperation has successfully organised 4 annual conferences and annual general meetings. In 2013, 5th OIC-CERT Annual General Meeting was successfully organised in Bandung, Indonesia on 18 - 20 November 2013.

The conference themed “Cyber Security for Economic Growth” was held on 20 November 2013 and officiated by His Excellency Tifatul Sembiring, Minister of Communication and Information Technology Indonesia. The event was hosted by Indonesia Security Incident Response Team on Internet Infrastructure/Coordination Center (Id-SIRTII/CC) and co-organised by CyberSecurity Malaysia.

During the event, a hand over ceremony of the mandate as OIC-CERT Chairman was held where CyberSecurity Malaysia as the incumbent Chairman lead by General Tan Sri Dato’ Seri Panglima Mohd Azumi Mohamed (Retired) handed over the operating manual to Mr. Badar Ali Said Al-Salehi representing Oman as the Chairman of OIC-CERT.

During the conference 14 speakers from 9 countries presented their papers and shared ideas on handling cyber threat issues. The speakers were industry professionals and experts in the field of cyber security. Speakers were from the following countries:

1. Singapore
2. Nigeria
3. Oman
4. Indonesia
5. United States of America
6. Japan
7. Malaysia
8. Pakistan

Also attending this event were 152 participants from 12 countries as below:

Following are the outcomes of the Organisation of Islamic Cooperation - Computer Emergency Response Team (OIC-CERT) Annual Conference and the 5th Annual General Meeting 2013:

1. Appointment of Oman as the Chairman of OIC-CERT and Driving Committee Members of OIC-CERT for the period of 2013 - 2015

• 5th Annual General Meeting witnessed the selection of 5 new Driving Committee members for 2 years from 2013 - 2015.
• 5 countries were selected as OIC-CERT Driving Committee Members:
  1. Oman
  2. Mesir
  3. Indonesia
  4. Tunisia
  5. United Arab Emirates
• The meeting also agreed to select Oman as the Chairman of OIC-CERT for the period between 2013 - 2015 replacing Malaysia.

2. Appointment of Malaysia as OIC-CERT Permanent Secretariat

• Malaysia, through CyberSecurity Malaysia has presented a proposal to establish the Permanent Secretariat at the 5th OIC-CERT Annual General Meeting which was held in Bandung Indonesia on 19 November 2013.
• OIC-CERT members have unanimously agreed with the establishment of Permanent Secretariat to further enhance the operational capabilities of OIC-CERT. This is a global recognition for Malaysia which indirectly enhances Malaysia’s credibility and leadership in the field of cyber security.
• The appointment is also a great opportunity for Malaysia to continue holding leadership and commitment in cyber security industry as well as leading the cyber security field among OIC countries.

3. Appointment of General Tan Sri Dato’ Seri Panglima Mohd Azumi Mohamed (Retired) as the Advisor to OIC-CERT Chairman

• 5th Annual General Meeting has agreed to appoint General Tan Sri Dato’ Seri Panglima Mohd Azumi Mohamed (Retired), Chairman Board of Directors, CyberSecurity Malaysia as an Advisor to Oman, the new Chairman of OIC-CERT.
• This appointment is recognition to Tan Sri Azumi’s contribution in the field of cyber security among the OIC countries.  

First Responder Training for Bank Negara Malaysia was carried out to share digital forensic knowledge in terms of terminologies and specific knowledge for the participants.

This training enabled participants to understand digital forensic in terms of:

1. Digital forensic and analysis investigation methods;
2. Current digital technologies;
3. How to obtain digital evidences from crime scenes;
4. Type of data that can be extracted from digital media.

On 19 - 21 November 2013, CyberSecurity Malaysia has carried out a training program to introduce the new edition of ISMS, ISO/IEC 27001:2013.

48 participants including the staff of CyberSecurity Malaysia and officers from various organisations such as SIRIM QAS International Sdn Bhd, Standard Malaysia Department, Bursa Malaysia Berhad, RHB Bank Berhad and Teknologi Tenaga Perlis Consortium attended this program.

Prof. Edward Humphreys, an information security and risk management expert with approximately 30 years of experience conducted the training program. 

The three days training program discussed various subjects such as:

1. Difference between the requirements of new and old standards;
2. Additional requirements; and
3. Abolished requirements.

National Cyber Crisis Exercise is an annual program being held since 2008. Famously known as X-MAYA, it is one of the training programs conducted under the National Cyber Security Policy, specifically under Thrust 7 - Cyber Security Emergency Readiness; which has National Security Council (MKN) as the Thrust Leader.

This year, 18 Sector Leads, 98 agencies across the 10 Critical National Information Infrastructure (CNII) took part in the exercise.

Main objectives of X-MAYA are to:

1. Examine the effectiveness, identifying the gaps and improve Communication Procedures, Responses and Coordination of National Cyber Crisis Management;
2. Increase the awareness among Sector Leads and Critical National Information Infrastructure (CNII) agencies/organisations on cyber attacks;
3. Familiarize sector leads and CNII agencies/organisations on cyber incident handling mechanisms;
4. Establish level of readiness and preparedness of CNII agencies/organisations in facing cyber attacks and examine effectiveness of internal incident handling procedures of relevant CNII agencies/organisations;
5. Familiarize communication between  respective  sector leads and CNII agencies/organisations during cyber incidents. 

Summary of X-MAYA 5  Activities

1. Briefing of the X-MAYA 5 final workshop were organised on 18 November 2013 at Prime Minister’s Department Auditorium. During this session, participants were given the ‘thumbkit’ which contained software, manual, images and artifacts required for the National Cyber Crisis Exercise.
2. Exercise Controller (EXCON) Dry Run was held on 1 November 2013.
3. National Cyber Coordination and Control Centre (NC4) Dry Run was held on 6 November 2013.
4. Internet Relay Chat (IRC) Communications & Exercise Portal Check was held on 20 – 22 November 2013. This session allowed participants to try out NC4 portal and IRC channels together with the software to be used during the practical training session at CyberSecurity Malaysia.
5. National Cyber Crisis Exercise was held on 25 November 2013. It started at 9.00am and ended at 5.30pm. The closing ceremony was officiated by YAB Tan Sri Dato’ Haji Muhyiddin bin Mohd. Yassin, Deputy Prime Minister of Malaysia on 26 November 2013 at Royale Bintang Hotel, Damansara. In attendance for the closing ceremony were invited speakers from Korea, foreign diplomats, Ministry and Department heads and representatives of participating agencies.
6. Debrief session was held on 27 November 2013 at Dewan Taklimat, Bangunan Perdana Putra, Prime Minister’s Department. The session was to allow participants to share the technical experience and knowledge as well as obtained technical explanation from EXCON on practical training scenarios. Secretariat also shared the online feedback received after the practical training session. At the end of the workshop, participants shared valuable feedback to National Security Council and CyberSecurity Malaysia on procedure improvements and practical training implementation in future.

Cyber Security Awareness Program – CyberSAFE in October 2013

Various activities under cyber security awareness program or CyberSAFE were carried out in the month of November 2013 to improve information security awareness levels among public and private organisations as well as the communities with special focus on school children and teenagers. These activities highlighted cyber security issues and best methods to handle and prevent from becoming victims of cyber threats.

Among the information security awareness programs that were carried out in the fourth quarter of 2013 include:

The cyber security awareness programs are able to promote initiatives and services offered by CyberSecurity Malaysia such as Cyber999 and CyberSAFE portal. The program is also able to create awareness on the threats face by the Internet and computer users and the changes in our daily life in line with the advancement of communication technology.