THE belief that small and medium enterprises (SMEs) are “too small” to be targeted by cybercriminals is a dangerous and costly misconception, industry players warn.
Driven by the stark statistic that 84% of Malaysian SMEs experienced cyber incidents in the past year, Digital Penang, in collaboration with HWD Systems Sdn Bhd, will conduct a “Cyber Threats Are Closer Than You Think” workshop on May 4 at Wisma Yeap Chor Ee from 9am to 12pm.
Digital Penang’s SME and Community Development director Khooi Chu Boon said the three-hour session targets about 60 companies, including SME owners, founders and non-technical managers in Penang.
“We’re not just targeting IT personnel, but also non-technical individuals. Cybersecurity is not just for technical people because all of us are affected by it. Whether you’re technical or not, hackers don’t care,” Khooi said in an online interview via Google Meet, facilitated by Buletin Mutiara colleague Kevin Vimal and attended by HWD Systems chief product marketing officer Kakit Tan and Chinese desk reporter Eng Kok Wei.
He added that the session is particularly relevant to Penang, where 74% of SMEs supply to larger corporations or multinational companies (MNCs).
“Because 67% of SMEs incorrectly believe large corporations are bigger targets, SMEs are actually more vulnerable due to limited resources, particularly in IT knowledge and cybersecurity investment.
“Our workshop aims to show that they don’t need a lot of money to begin with in building robust protection. It starts with the right mindset — shifting from viewing IT security as expensive software to recognising cyber resilience as a business survival skill.
“Of course, they also need the right solution partners. In this case, Digital Penang is working with HWD Systems to provide practical solutions,” said Khooi, who has over 35 years of experience in high-availability solutions, enterprise technical support and SME development.
He noted that while Digital Penang champions digital transformation, such progress cannot be sustained without trust and robust security measures.
The cyber threat landscape in Malaysia has become increasingly severe, with SMEs reportedly facing more than 19.6 million cyberattacks in 2024 alone, resulting in losses exceeding RM1.22 billion.
Khooi said in many cases, cybercriminals are not just after money but also valuable customer data, which can be exploited for further attacks or used to infiltrate larger organisations. Many breached SMEs end up losing critical customer information.
“Cybersecurity is not just the responsibility of the IT department. It is everyone’s responsibility. As long as you are connected to the internet, you are responsible,” he said.
Among the key takeaways, participants will receive a “Zero Trust” checklist to assess organisational risk, a cyber recovery playbook outlining immediate steps during a breach, and guidance on accessing comprehensive risk management solutions.
Tan said that following the signing of a memorandum of understanding between HWD Systems and Digital Penang in February, both parties have been working towards organising the programme to help SMEs strengthen their cyber resilience.
“This will be the first in a series of programmes, starting in Penang — home to thousands of SMEs — before expanding awareness efforts nationwide,” said Tan, a digital solutions leader with over 15 years of experience.
“We want businesses to understand the risks in today’s environment. Every time we turn on a computer, click a link or open an email, there is potential danger. Awareness must extend beyond management to every employee.”
Currently leading CyberSure, a cybersecurity solution designed specifically for SMEs, Tan will share practical insights on protecting businesses from phishing, ransomware and data breaches, as well as how to minimise disruptions and recover quickly without complex systems.
He added that a cybersecurity expert and a representative from Tokio Marine Insurance will also share their expertise during the workshop.
“When we talk about cyber protection, we can’t run away from insurance. Just like healthcare, we cannot just eat well and exercise — insurance is equally important. Tokio Marine is one of our partners as well, giving the audience a glimpse of what cyber insurance is and what are the challenges the SMEs face when they want to buy cyber insurance.
“When we talk about cyber protection, we can’t run away from insurance. Just like healthcare, good habits alone are not enough — insurance provides an added layer of protection.
“However, obtaining cyber insurance can be more challenging than traditional policies, such as fire or SME insurance. Yet its importance cannot be overstated, as a cyber incident can jeopardise a business for months,” he said
Tan noted that SMEs with little or no cybersecurity protection are often easy targets for cybercriminals, likening them to low-hanging fruit.
Real-life case studies, both local and international, as well as live demonstrations showing how attackers infiltrate SME systems, will be presented during the workshop.
He added that CyberSure offers free AI-based assessments to help SMEs identify vulnerabilities and receive recommendations to strengthen their defences. More information is available at www.cybersure.com.my.
Participation in the workshop is free, but registration is required due to limited seats. Registration can be made at https://bit.ly/Cybersure2026.
Story by K.H. Ong
Pix by Darwina Mohd Daud and courtesy of Digital Penang