Conference Description
Key Takeaways
- Annual cybersecurity and IT governance conference now in its 24th year, organised by ISACA Malaysia Chapter
- Focuses on digital resilience, trust governance, risk quantification and compliance frameworks
- Examines the operational and regulatory implications of quantum computing and artificial intelligence
- Designed for CISOs, IT auditors, risk managers, compliance officers and governance professionals
- Features plenaries, panel discussions and masterclasses delivered by local and international experts
Introduction
CIAG 2026 (Cybersecurity, IT Assurance & Governance Conference) returns as the ISACA Malaysia Chapter’s flagship annual gathering for professionals working across information security, risk management and IT governance. Now in its 24th edition, the conference addresses an increasingly urgent set of challenges: how organisations can maintain digital resilience, satisfy evolving compliance requirements and govern emerging technologies responsibly. With quantum computing advancing toward practical deployment and artificial intelligence reshaping enterprise operations, the timing reflects genuine shifts in the threat and regulatory landscape facing Malaysian businesses and their international counterparts.
About This Event
The conference takes place as a fully in-person event at the Sheraton Petaling Jaya Hotel, bringing together local and international subject matter experts across multiple session formats. Attendees can expect a programme structured around plenaries, panel discussions and hands-on masterclasses, each designed to balance strategic perspectives with practical implementation guidance. The event’s theme, “The Digital Resilience Mandate: Governing Trust, Quantifying Risk, and Ensuring Compliance in the Quantum-AI Era,” signals a deliberate focus on the governance implications of technologies that are rapidly moving from theoretical concern to operational reality.
Digital Resilience and Trust Governance in Focus
Digital resilience has become a board-level priority as organisations recognise that cyber incidents are no longer exceptional events but predictable operational risks. The conference examines how governance frameworks must evolve to address this reality, moving beyond perimeter-focused security toward holistic approaches that encompass recovery capabilities, supply chain dependencies and third-party risk. Trust governance—the mechanisms by which organisations demonstrate accountability to regulators, customers and partners—forms a complementary thread, particularly as data protection regulations and sector-specific compliance requirements continue to expand across the Asia-Pacific region.
Quantum Computing and AI: Governance Implications
The intersection of emerging technologies with established governance disciplines represents a central concern for CIAG 2026. Quantum computing poses well-documented challenges to current cryptographic standards, requiring organisations to begin planning migration strategies even before fault-tolerant quantum systems become widely available. Artificial intelligence introduces different but equally complex governance questions, from algorithmic accountability and bias detection to the assurance of AI-driven decision systems. The conference addresses both the technical dimensions of these technologies and the strategic frameworks needed to manage their adoption responsibly.
Risk Quantification and Compliance Frameworks
Effective risk management increasingly depends on the ability to quantify cyber risk in terms that resonate with executive leadership and boards. The conference explores methodologies for translating technical vulnerabilities into business impact assessments, enabling more informed investment decisions and clearer communication with non-technical stakeholders. Compliance remains a parallel concern, as regulatory frameworks across financial services, critical infrastructure and data protection continue to mature. For Malaysian organisations operating regionally or globally, understanding the interplay between local requirements and international standards has become essential.
Who Should Attend
CIAG 2026 is designed for mid-to-senior level professionals with responsibilities spanning IT assurance, cybersecurity, risk management and governance. Chief Information Security Officers, Chief Information Officers, IT auditors, compliance officers and risk managers represent the core audience, alongside consultants advising organisations on these disciplines. The programme accommodates both public and private sector perspectives, recognising that governance challenges increasingly transcend traditional industry boundaries. Members of professional bodies and those pursuing continuing professional development in ISACA-aligned domains will find the content directly relevant to their certification and career objectives.
Conclusion
As organisations navigate an environment where technological capability and regulatory expectation evolve in parallel, events like CIAG 2026 serve an important function in consolidating practitioner knowledge and establishing shared frameworks for addressing common challenges. The conference’s longevity—now approaching a quarter century—reflects sustained demand for forums where governance, risk and security professionals can engage with emerging issues before they become operational crises.