Bismillahir Rahmanir Rahim 

Alhamdullilahi Rabbil `Alameen Wasaalatu Wassalaamu `Ala Asyrafil Ambiae 

Walmursaleen, Saidina Muhammadin Wa’alaa Aalihiee Wasahbihee Ajama’een 

Assalamu’alaikum warahmatullahi wabarakatuh, and a very good afternoon. 

Yang Mulia Dato Seri Paduka Awang Haji Sufian Bin Haji Sabtu, 

Deputy Minister at Prime Minister’s Office, Security and Law; 

Yang Mulia Dato Paduka Seri Haji Mohammad Irwan Bin Haji Hambali, the Commissioner of Police (CP) of Royal Brunei Police Force (RBPF); 

Your Excellencies High Commissioners, Ambassadors, and Members of the Diplomatic Corp; 

Permanent Secretaries, Deputy Permanent Secretaries, Senior Officials; 

Yang Mulia Shamsul Bahri bin Haji Kamis, Commissioner of Cyber Security Brunei (CSB); 

Yang Mulia Mohd Azad Zaki bin Haji Mohd Tahir, President of Brunei Cyber Security Association (BCSA); 

Distinguished panelists and delegates, 

Ladies and Gentlemen

1. Please allow me to first of all express my sincere appreciation to Cyber Security Brunei (CSB) and the Brunei Cybersecurity Association (BCSA) for organizing and hosting this important two days conference. I would also like to thank the organizers for giving me the opportunity to address and welcome everyone to the 2nd Brunei Cybersecurity Conference (CySec) 2024, which is being held at a pivotal time in the global cybersecurity landscape. 

2. The theme, "Cyber Vigilance and Data Sovereignty: Shielding the Digital Horizon" aims to highlight the critical role that everyone of us can play in securing our digital future. Cybersecurity is more than just about technology – it is also about fostering a culture of vigilance. As threats evolve, vigilance will always remain as one of our strongest defenses in protecting what matters most. 

3. Equally vital is data sovereignty, ensuring our most valuable resource—data—remains under our control and not compromised. Data sovereignty is crucial for ensuring that data handling practices align with local legal standards as well as data protection, privacy and security requirements. As such, nations are stepping up the introduction of robust laws and investments in sovereign data centers. 

4. In 2023, Southeast Asia experienced an unprecedented wave of cyberattacks targeting critical sectors like healthcare, government, and financial institutions disrupting services and rattling the digital infrastructure. Coordinated ransomware attacks crippled government data centers, while phishing schemes targeted the banking system, revealing vulnerabilities that undermined public trust. 

5. It is also important to understand and distinguish between cyber threats and cybercrime – with both posing significant but distinct risks that must be addressed with their own tailored strategies. Cyber threats primarily involve attacks on critical infrastructure, data breaches, and disruptions to services, often orchestrated by state-sponsored actors or advanced persistent threats (APTs). These threats target national security, economic stability, and public safety. On the other hand, cybercrime, such as scams, fraud, and identity theft, is typically financially motivated and directly impacts citizens and businesses throughout. 

6. For Brunei Darussalam this also becomes more important as the nation continues with her digitalization journey. For example, in the pursuit of digitalising more government services and operations, the Government of His Majesty The Sultan and Yang Di-Pertuan of Brunei Darussalam has allocated more than 200 million Brunei Dollars under the current 12th National Development Plan for strengthening information and communication technology infrastructure including the upgrading and introduction of new systems. These would inevitably also contribute towards building our cyber resilience. 

7. To address cyber threats, our focus must be on strengthening our national cyber defense, securing critical infrastructure, and collaborating internationally to prevent sophisticated adversaries. In contrast, cybercrime prevention requires a proactive approach, including awareness campaigns, law enforcement capabilities, and leveraging emerging technologies like AI and machine learning to detect and prevent fraudulent activities. 

8. Both issues demand immediate and focused attention, but each with distinct strategies-ensuring Brunei remains secure from high-level cyber threats while also protecting the everyday digital lives of citizens. 

A Secure Digital Economy and CII Protection 

9. In today's increasingly interconnected world, the security of our digital infrastructure is imperative; it is essential for national security, economic progress and prosperity of our nation. In response to this urgent need, the Government of His Majesty The Sultan and Yang Di-Pertuan of Brunei Darussalam had taken decisive action with the enactment of the 2023 Cybersecurity Act, to protect our Critical Information Infrastructure (CII). However, laws alone are not enough. We also need strong partnerships across sectors to build a truly resilient digital ecosystem. 

10. We’re taking proactive measure to safeguard our CII, building resilient infrastructure, and enhancing real-time monitoring to detect and neutralize cyber threats before they cause harm. Cyber Security Brunei (CSB) plays a key role in uniting government, industry, and communities toward a secure digital future. The newly formed CII Office is central to executing this protection strategy. 

11. The Cybersecurity Act lays the legal foundation, while the Cybersecurity Code of Practice for Critical Information Infrastructure (CII) sets a clear baseline for securing our most critical systems. By adopting global best practices, we want to ensure our systems are resilient and capable of recovering quickly from disruptions. The Guideline for Auditing and Risk Assessment ensures that CII owners conduct regular risk assessments activities which are designed to measure the effectiveness of cyber-risk controls and practices in their organizations. 

12. Systematic risk management is at the core of our cybersecurity strategy. The act requires CII owners to perform rigorous risk assessments, continuously identifying and addressing vulnerabilities of their own critical systems. This approach ensures that our infrastructure, which is critical for our digital economy remains strong and a stable foundation for continued growth and innovation. 

Distingushed Guests, Ladies and Gentlemen, 

13. Referring back to the matter of data sovereignty, we are committed to implementing data protection laws and investing in local data centers and sovereign cloud services to ensure our data remains under national control. 

14. The Authority for Info-communications Technology Industry (AITI) is at the forefront of enhancing Brunei’s legal framework for data protection. Currently in its final drafting stage, AITI will be responsible for promoting awareness, support organizations in complying with the personal data protection requirements.

15. Similarly, the Unified National Network (UNN) is leading the charge in developing local cloud data centers. This effort reduces our reliance on foreign infrastructure and enhances the security of our sensitive information. 

16. The E-Government National Centre (EGNC) plays a key role as the government’s private cloud provider, driving flagship projects such as the National Information Hub and Digital ID. These initiatives aim to modernize government services and reinforcing data protection, reflecting Brunei’s commitment to becoming a digitally empowered nation. 

17. Furthermore, the Smart Nation Office within the Ministry of Transport and Infocommunications (MTIC) is guiding Brunei’s vision of becoming a Smart Nation. Through the Digital Economy Council, this office ensures that our digital transformation initiatives align with long-term goals, paving the way for a future where every citizen can thrive in a digitally connected society. 

Ladies and Gentlemen, 

18. Last year, I had the honor of officiating the 1st Brunei Cybersecurity Conference. At that inaugural event, we laid the foundation for what we envisioned to be a cornerstone event in our nation’s cybersecurity landscape. Today, it is truly inspiring to see the tremendous growth and enthusiasm that has brought us back together. The fact that the conference has doubled in size this year speaks volumes about the growing awareness of cybersecurity’s importance and the collective effort of all involved. This success highlights the power of public-private partnerships - a shining example of how government, industry, and the community can come together to address the complex challenges of the digital age. 

19. Brunei Darussalam has actively led in organizing and participating in key knowledge sharing forums that promote cybersecurity dialogue and collaboration. From the Digital Future Conference to the ASEAN Inter-Parliamentary Assembly (AIPA) forum, we’ve brought together experts from various sectors to share knowledge and strategies for securing our digital future. Events like the Olive Conference and last year’s Cybersecurity Conference 2023 highlight our commitment to fostering cooperation and advancing the implementation of cybersecurity initiatives locally, connected cybersecurity ecosystem. 

20. In concluding, I would like to once again extend my deepest gratitude to Cyber Security Brunei (CSB) and the Brunei Cybersecurity Association (BCSA) for their invaluable contributions. Congratulations to everyone who has played a role in bringing this conference to fruition – from industry players, academic institutions, businesses and individuals. Your dedication has strengthened our collective responsibility to protect Brunei’s digital future. 

21. As we move forward, let us build on the momentum we have created. Together, we will ensure that Brunei Darussalam remains at the forefront of cybersecurity innovation and resilience. Thank you for your vision, commitment, and unwavering efforts towards in creating a safer digital world. 

Thank you. 

Wabillahi Taufik Walhidayah, Wassalamu Alaikum Warrahmatullahi Wabarakatuh.