Malaysia Unveils Tiered Technology Risk Management Rules for Payment Providers to Strengthen Cybersecurity

Malaysia's Bank Negara Malaysia (BNM) has introduced a comprehensive Technology Risk Management (TRM) framework specifically for payment service providers.

The new policy consolidates technology requirements into a single document targeting payment services regulatees (PSRs), including approved issuers of electronic money (EMI), registered merchant acquirers (MA), and money services businesses (MSB).

Key Features of the Tiered Framework

The framework applies proportionate regulations based on the size and complexity of PSRs through a tiering system.

It elevates requirements to enhance system stability and reliability amid growing digital transaction volumes.

Strengthened measures focus on bolstering cybersecurity and data protection for payment ecosystems.

Providers must now implement advanced fraud detection, real-time monitoring, and tools for customer empowerment.

Impacts on Malaysia's Fintech Landscape

This update builds on Malaysia's rapid fintech growth, where digital payments surged post-pandemic, necessitating robust risk controls.

Historically, similar BNM guidelines have helped mitigate cyber threats, reducing incidents in the banking sector by over 30% in recent years.

For PSRs, compliance will demand investments in technology but promises greater operational resilience.

Looking ahead, the framework supports secure adoption of innovations like AI-driven payments and blockchain.

Ultimately, these rules aim to protect consumers while fostering a trusted environment for fintech expansion in Malaysia.