Simulations, role-based training and certificates for Malaysian
banks, NCII entities and enterprises, with evidence filed to BNM RMiT,
the Cyber Security Act 854 and the PDPA.
Request a
demonstration · See the GRCLens Malaysia
page
Who this is for in Malaysia
Organisations in Kuala Lumpur, Penang and Johor Bahru that must show
a regulator or auditor that staff awareness is tested, trained and
recorded: BNM-regulated banks, insurers and payment firms, NCII entities
designated under Act 854, and PDPA-regulated businesses in every
sector.
Which Malaysia
frameworks PhishLens evidences
PhishLens runs on the shared control model of GRCLens, so evidence
captured once is mapped to every framework you are assessed against. In
Malaysia that means:
| Framework | Awareness and training requirement it evidences |
|---|---|
| Bank Negara Malaysia RMiT | staff awareness and training for financial institutions |
| Cyber Security Act 2024 (Act 854) and NACSA codes of practice | awareness obligations for national critical information infrastructure entities |
| Malaysia PDPA (2024 amendments) | training for staff handling personal data, with the new data protection officer role |
| ISO 27001:2022 | A.6.3 information security awareness, education and training |
Built for Malaysia
Malaysian financial institutions evidence RMiT awareness requirements
every year, and NCII entities now carry Act 854 obligations on top.
PhishLens captures the simulation and training evidence once and GRCLens
maps it to RMiT, the NACSA codes of practice and the PDPA. Security
Solution Consultants is building its Kuala Lumpur channel and sponsors
the PCI SSC Asia-Pacific community meeting in KL in November 2026.
What PhishLens does, in brief
PhishLens gives a Malaysian institution the full awareness cycle: simulations through a dry-run gate, courses by role, auto-enrolment of new starters, the executive dashboard and the operations queues, a 15-KPI scorecard, certificates with verification, and evidence filed to the RMiT or NACSA requirement. The PhishLens product page has the complete description.
Frequently asked questions
Does PhishLens produce
RMiT evidence?
Yes. Campaign and training results are filed against the awareness
and training requirements in BNM RMiT, which GRCLens holds.
Does it help with
the Cyber Security Act 854?
Yes. NCII entities can file awareness evidence against the NACSA
codes of practice in the same way.
Is training available
in Bahasa Malaysia?
Lessons are delivered in English today. Tell us if Bahasa Malaysia is
a requirement for your rollout.
Can we work with a local
partner?
Yes. We are appointing Malaysian channel partners and can introduce
you to one.
Talk to us about PhishLens
Request a demonstration and we will run a baseline simulation design
for your organisation, show the executive dashboard with demo data, and
map the evidence to the frameworks you are assessed against.
Looking for professional certification courses (lead auditor, implementer, regulator-specific classes) rather than a staff awareness programme? See our Malaysia Cyber Security Act and RMiT training courses.
Request a
demonstration · Explore
the GRCLens platform · On-premise
deployment
