Reviewed annually; changelog at the bottom. Every published entry carries a pir: tag — so coverage below is verifiable against the tag pages, not aspirational.
| PIR | Requirement | Primary stakeholder | Coverage (qtr) |
|---|---|---|---|
| PIR-01 | Which threat actors are targeting Malaysian government, GLCs, and CNII, and with what TTPs? | Gov/GLC/CNII SOC & CTI | |
| PIR-02 | Which campaigns and malware families are affecting Malaysian organizations at scale? | SOC analysts | |
| PIR-03 | Which vulnerabilities have confirmed or probable Malaysian exposure, and are they being exploited? | CISO, vuln mgmt | |
| PIR-04 | Which phishing and scam campaigns are targeting the Malaysian public (APK scams, banking lures)? | Public, awareness teams | |
| PIR-05 | Which ICS/OT threats touch equipment and protocols common in Malaysian CNII? | CNII operators, OT engineers | |
| PIR-06 | Which ransomware/extortion groups are claiming Malaysian victims, and what are their entry paths? | CISO, management | |
| PIR-07 | Which technology suppliers in Malaysian government, GLC and CNII environments carry foreign ownership or jurisdiction exposure, where does Malaysian data flow, and how is national policy (JKSN, NACSA, Act 854) changing in response? | Gov/GLC/CNII CISO, procurement, policy |
mindmap root((PIR 2026)) PIR-01 Actors vs MY gov/CNII PIR-02 Campaigns at scale PIR-03 MY-exposed CVEs PIR-04 Public phishing/scams PIR-05 ICS/OT threats PIR-06 Ransomware/extortion PIR-07 Supply chain & tech sovereignty
How to use this page
Map these against your own organization’s PIRs. Where they overlap, our tags (pir: [PIR-XX]) let you filter exactly the entries that serve your requirement — a free extension of your collection plan.
Changelog
| Date | Change |
|---|---|
| 2026-01 | PIR set published; PIR-05 (ICS/OT) elevated to match MISP-ICS-OT feed depth |
| 2026-10 | PIR-07 (supply chain & tech sovereignty) added after the JKSN 3/2026 Waze directive |