{"id":2613,"date":"2026-04-23T10:38:47","date_gmt":"2026-04-23T10:38:47","guid":{"rendered":"https:\/\/shiftfocus.my\/?p=2613"},"modified":"2026-04-23T10:38:48","modified_gmt":"2026-04-23T10:38:48","slug":"racing-into-ai-malaysia-advances-quickly-but-regulation-falls-behind","status":"publish","type":"post","link":"https:\/\/shiftfocus.my\/?p=2613","title":{"rendered":"Racing Into AI: Malaysia Advances Quickly, But Regulation Falls Behind"},"content":{"rendered":"\n

The message isn\u2019t new \u2014 but it\u2019s getting louder.<\/strong><\/p>\n\n\n\n

From McKinsey & Company to Gartner, and even Stanford HAI, major reports have been pointing in the same direction: AI adoption is moving at full speed, while governance struggles to keep up. Now, fresh data from Trend Micro\u2019s TrendAI division adds more weight to that growing concern.<\/p>\n\n\n\n

Based on a global survey of 3,700 IT and business leaders across 23 countries, the findings reinforce a pattern that\u2019s becoming hard to ignore \u2014 the real risk in AI isn\u2019t just the technology itself, but the widening gap between how fast it\u2019s being deployed and how well it\u2019s being controlled.<\/p>\n\n\n\n

And this is where Malaysia stands out.<\/p>\n\n\n\n

Among all markets surveyed, Malaysia recorded the highest level of pressure to push AI forward<\/strong>, even when risks are involved. About 75% of local IT decision-makers<\/strong> said they feel pushed to approve potentially risky AI implementations \u2014 notably higher than the global average.<\/p>\n\n\n\n

But while adoption speeds ahead, detection capability tells a different story. Malaysian organisations are only catching around 33\u201334% of malicious AI activity<\/strong>, slightly below global benchmarks.<\/p>\n\n\n\n

Put those two realities together, and a clearer picture emerges.<\/p>\n\n\n\n

Malaysia isn\u2019t just embracing AI quickly \u2014 it\u2019s doing so with less visibility into what could go wrong<\/strong>.

The AI Governance Gap Malaysia Can\u2019t Afford to Ignore<\/p>\n\n\n\n

When Tech Wire Asia raised this directly with Ryan Flores during a media briefing in Kuala Lumpur, the response was refreshingly blunt. The governance gap, he explained, isn\u2019t unique to Malaysia \u2014 it\u2019s a global issue. But what sets Malaysia apart is the intensity of pressure<\/strong> to move quickly.<\/p>\n\n\n\n

That urgency is coming from the top. National initiatives like the AI Nation 2030 roadmap, the MY-AI Standards platform, and large-scale investments in data centres are all clear signals: Malaysia wants to be a serious AI player, fast. But when that ambition filters down into companies, speed often takes priority over caution.<\/p>\n\n\n\n

Security isn\u2019t ignored \u2014 it\u2019s simply overruled by momentum<\/strong>.<\/p>\n\n\n\n

The problem is that governance hasn\u2019t kept up. Malaysia\u2019s proposed AI Governance Bill is still some distance from becoming policy, and existing guidelines remain largely voluntary. In the meantime, companies are left to navigate risk on their own.<\/p>\n\n\n\n

Flores\u2019 advice reflects that reality: don\u2019t wait.<\/p>\n\n\n\n

\n

\u201cOrganisations need to define their own policies\u2026 If everyone waits for regulation, problems are going to happen.\u201d<\/p>\n<\/blockquote>\n\n\n\n

It\u2019s a rare moment where a vendor openly tells businesses to act independently \u2014 and in this case, it\u2019s hard to argue otherwise.<\/p>\n\n\n\n

Big Bets on AI \u2014 But Gaps in Readiness<\/strong><\/h2>\n\n\n\n

There\u2019s another contradiction buried in the data.<\/p>\n\n\n\n

Malaysia isn\u2019t just adopting AI quickly \u2014 it\u2019s also one of the most optimistic markets when it comes to agentic AI<\/strong>, with 60% of decision-makers expecting it to significantly reshape cybersecurity. That\u2019s well above the global average.<\/p>\n\n\n\n

On paper, that sounds promising. In reality, it raises questions.<\/p>\n\n\n\n

Because while expectations are high, detection capabilities are still lagging<\/strong>. Organisations are catching less malicious AI activity than the global average, which means the tools meant to defend systems aren\u2019t yet keeping up with the threats.<\/p>\n\n\n\n

When asked about this mismatch, Flores suggested that companies don\u2019t need to solve everything at once. Governance and implementation, he said, can evolve side by side \u2014 start small, scale carefully, and align leadership around risk.<\/p>\n\n\n\n

It\u2019s logical advice. But it assumes something the data suggests is still missing: internal alignment.<\/p>\n\n\n\n

A Disconnect Between Business and IT<\/strong><\/h2>\n\n\n\n

One of the clearest gaps isn\u2019t technical \u2014 it\u2019s organisational.<\/p>\n\n\n\n

Only a small portion of Malaysian business leaders have received formal AI training, while IT teams are significantly more prepared. The result is a divide where those approving AI adoption and those managing its risks aren\u2019t operating on the same page<\/strong>.<\/p>\n\n\n\n

Governance shows a similar pattern. IT teams are far more likely to have policies in place compared to business units, reinforcing the idea that responsibility is unevenly distributed.<\/p>\n\n\n\n

Goh Chee Hoh summed it up simply: business leaders see AI as a tool to drive growth, while IT teams understand the complexity behind securing it.<\/p>\n\n\n\n

Bridging that gap, he argued, requires elevating AI security beyond the IT department \u2014 making it a board-level priority<\/strong> rather than a technical afterthought.<\/p>\n\n\n\n

Competitive, But Is It Enough?<\/strong><\/h2>\n\n\n\n

From a regional perspective, Malaysia isn\u2019t falling behind. With support from institutions like Bank Negara Malaysia and CyberSecurity Malaysia, the country has a relatively strong foundation compared to some of its Southeast Asian peers.<\/p>\n\n\n\n

By that measure, Malaysia is competitive.<\/p>\n\n\n\n

But competitiveness doesn\u2019t necessarily equal readiness \u2014 especially when the threat landscape is evolving just as quickly as the technology itself.<\/p>\n\n\n\n

What This Actually Means<\/strong><\/h2>\n\n\n\n

None of this is entirely new. Reports from global firms have been repeating the same themes for years: AI adoption is outpacing governance, business and IT are misaligned, and more autonomous systems are arriving before organisations are fully prepared.<\/p>\n\n\n\n

What Malaysia adds to that narrative is scale and urgency<\/strong>.<\/p>\n\n\n\n

    \n
  • Higher pressure to deploy AI<\/li>\n\n\n\n
  • Lower detection of AI-related threats<\/li>\n\n\n\n
  • Regulation still in progress<\/li>\n\n\n\n
  • Strong belief in AI\u2019s potential<\/li>\n<\/ul>\n\n\n\n

    That combination creates a very specific kind of risk \u2014 one where ambition moves faster than control.<\/p>\n\n\n\n

    The Real Question<\/strong><\/h2>\n\n\n\n

    The issue is no longer whether a governance gap exists. That\u2019s already clear.<\/p>\n\n\n\n

    The real question is who takes ownership of closing it<\/strong> \u2014 and whether they have enough authority to act before something forces the conversation.<\/p>\n\n\n\n

    Flores pointed to a practical starting point: focus on manageable use cases like chatbots or internal automation, build governance frameworks around those, then expand gradually.<\/p>\n\n\n\n

    It\u2019s a disciplined approach.<\/p>\n\n\n\n

    But in a market moving as quickly as Malaysia, the bigger challenge may not be knowing what to do \u2014 it\u2019s whether companies can slow down just enough to do it properly<\/strong>.<\/p>\n\n\n\n

    <\/p>\n","protected":false},"excerpt":{"rendered":"

    The message isn\u2019t new \u2014 but it\u2019s getting louder. From McKinsey & Company to Gartner, and even Stanford HAI, major reports have been pointing in the same direction: AI adoption is moving at full speed, while governance struggles to keep up. Now, fresh data from Trend Micro\u2019s TrendAI division adds more weight to that growing […]<\/p>\n","protected":false},"author":4,"featured_media":2614,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[71,12],"tags":[],"class_list":["post-2613","post","type-post","status-publish","format-standard","has-post-thumbnail","category-news","category-tech-review"],"_links":{"self":[{"href":"https:\/\/shiftfocus.my\/index.php?rest_route=\/wp\/v2\/posts\/2613","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/shiftfocus.my\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/shiftfocus.my\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/shiftfocus.my\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/shiftfocus.my\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2613"}],"version-history":[{"count":1,"href":"https:\/\/shiftfocus.my\/index.php?rest_route=\/wp\/v2\/posts\/2613\/revisions"}],"predecessor-version":[{"id":2615,"href":"https:\/\/shiftfocus.my\/index.php?rest_route=\/wp\/v2\/posts\/2613\/revisions\/2615"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/shiftfocus.my\/index.php?rest_route=\/wp\/v2\/media\/2614"}],"wp:attachment":[{"href":"https:\/\/shiftfocus.my\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2613"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/shiftfocus.my\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2613"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/shiftfocus.my\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2613"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}