Also Available

Cybersecurity Training For Banks In Malaysia

Role-based cybersecurity and fraud-awareness training for banks and financial institutions: staff, front line, IT, developers, risk and leadership. Delivered in-house and tailored to how your teams actually work.

Email Us
Modules

Seven Ways To Build A Safer Bank

Choose by audience. Most institutions begin with all-staff awareness and the front-line fraud module, then add technical and leadership sessions.

All staff

Cyber Awareness For Banking Staff

Phishing and social engineering, safe handling of customer data, passwords and multi-factor sign-in, secure working from branch and home, and how to report an incident fast.

Front line

Fraud & Scam Defence For Branch And Call-Centre Teams

Recognising impersonation, account-takeover and payment-scam patterns, verifying identity safely, and escalating suspicious activity without delay.

IT & security

Secure Operations & Incident Response

Detecting, triaging and containing incidents, runbooks and tabletop exercises, evidence handling, and clear communication during an incident.

Developers

Secure Development For Financial Applications

Common application weaknesses, secure coding habits, secrets and access handling, dependency and API risk, and security testing inside the delivery pipeline.

Risk & compliance

Technology Risk, Third Parties & Governance

Linking technology risk to business risk, managing vendors and cloud providers, audit evidence, and how regulatory expectations such as Bank Negara Malaysia's technology risk policy shape day-to-day controls.

Leaders

Board & Executive Cyber Briefing

What leaders should ask about resilience, incident readiness and accountability, and how to read cyber reports without a technical background.

AI at work

Using AI Safely In A Regulated Bank

What data may and may not go into AI tools, spotting AI-assisted fraud and deepfakes, checking AI output, and setting an acceptable-use policy that your risk team can stand behind.

Why It Matters

People Are Part Of The Control Environment

Banks hold money and sensitive personal data, which makes them a steady target for phishing, impersonation and payment scams. Technical controls matter, but so do the habits of the people who work inside them: how quickly a suspicious email is reported, whether a caller is verified before an account changes, and how calmly a team follows its incident runbook.

Our sessions are practical. We use short exercises, realistic scenarios and tabletop drills so people practise what they will actually do, and we leave teams with checklists they can reuse.

Agmo Holdings Berhad, the parent of Agmo Academy, holds ISO 27001 information security certification (see About). Training content is separate from that certification and does not make a claim about your own compliance.

Also see corporate and in-house training, our guide to AI and the PDPA and what a company AI usage policy should include.

This page is general information, not legal, regulatory or compliance advice.

Common Questions

FAQ

Is this training aligned with Bank Negara Malaysia requirements?
We design the content around the kinds of expectations Malaysian financial institutions work to, such as Bank Negara Malaysia's technology risk policy, the Personal Data Protection Act and the national cyber security law. Training supports your own compliance programme but does not replace your legal, risk or audit advice, and we do not certify compliance.
Do you provide a certification?
Participants receive a certificate of attendance from Agmo Academy. This is skills training, not preparation for a third-party security certification. If you need a specific vendor or professional credential, tell us and we will say plainly whether we can help.
Can the sessions use our own policies and scenarios?
Yes. We prefer to build exercises from your own processes, channels and incident types, so the practice reflects your real environment. Please share only non-sensitive material; we do not need access to live customer data or production systems.
Who delivers the training?
Sessions are scoped and staffed per cohort. We confirm the trainers and their experience for your programme during scoping, before you commit.
Is cybersecurity training HRD Corp claimable?
Ask us about your cohort. Claimability is subject to your company's eligibility and HRD Corp approval. See our HRD Corp claim guide.
How long are the courses and how much do they cost?
We scope each cohort around your teams, roles and goals, then quote the format, duration and price. Email us at [email protected] to start.

Tell us about your teams

Email us at [email protected] with your audiences and goals, and we'll propose a programme for your bank.

Email Us