Supplier Security Obligations — Self-Assessment Checklist

Supplier Security Obligations — Self-Assessment Checklist

This is a free, 30-minute self-assessment for Malaysian businesses that supply goods or services to other organisations. When a customer is subject to the Cyber Security Act 2024 — or is simply cautious — its compliance duties reach you through your contract: data-protection clauses, breach-notification deadlines, audit rights, certification warranties. This checklist helps you find those obligations in your own agreement and, more importantly, test whether you could actually prove you meet them if the customer asked.

You work through it privately, with your contract in front of you. Your answers stay with you — nothing you tick is submitted anywhere.

Get the checklist

Enter a few quick details below and you’ll get the download link as soon as you submit — nothing is held back. I ask for your name, email and company, plus (optionally) what prompted you to look, so I can point you to the right thing and, where it looks like I can actually help, follow up personally. No obligation, and you can opt out of anything further at any time. The full Personal Data Protection Notice, in English and Bahasa Malaysia, is just below the form.

Form not loading? Open it in a new tab.

Personal Data Protection Notice

When you request this checklist, chuinwei.com (Kenneth Wong) collects your name, email address and company/organisation, and — if you choose to share it — what prompted you to look at this.

  • Purpose. To send you the checklist; where it looks like I can help, to follow up with you personally about your situation; occasionally, to send related updates about the Cyber Security Act 2024 and supplier security (you can opt out at any time); and to understand what is driving demand so I can improve the checklist and related material.
  • Voluntary. Name, email and company are needed to send and personalise the checklist; the “what prompted you” question is optional. If you’d rather not provide the required details, I simply won’t be able to send you the checklist.
  • Storage and disclosure. Your details are held in the form and email services I use to deliver this (Google Forms/Sheets, and my email service). They are not sold, and not shared with anyone else for their own marketing.
  • Your rights. You may ask to access, correct or delete your data, or unsubscribe, at any time — just email kenneth@chuinwei.com.
  • Retention. Your details are kept only as long as needed for the purposes above.

By submitting the form, you consent to your personal data being processed as described.

Notis Perlindungan Data Peribadi

Apabila anda memohon senarai semak ini, chuinwei.com (Kenneth Wong) mengumpul nama, alamat e-mel dan nama syarikat/organisasi anda, serta — jika anda memilih untuk berkongsi — sebab anda melihat senarai semak ini.

  • Tujuan. Untuk menghantar senarai semak ini kepada anda; jika kelihatan saya boleh membantu, untuk menghubungi anda secara peribadi berkaitan situasi anda; sekali-sekala, untuk menghantar maklumat berkaitan Akta Keselamatan Siber 2024 dan keselamatan pembekal (anda boleh berhenti melanggan pada bila-bila masa); dan untuk memahami permintaan supaya saya dapat menambah baik senarai semak dan bahan berkaitan.
  • Secara sukarela. Nama, e-mel dan nama syarikat diperlukan untuk menghantar dan memperibadikan senarai semak; soalan “sebab anda melihat senarai semak ini” adalah pilihan. Jika anda memilih untuk tidak memberikan maklumat yang diperlukan, saya tidak akan dapat menghantar senarai semak ini kepada anda.
  • Penyimpanan dan pendedahan. Maklumat anda disimpan dalam perkhidmatan borang dan e-mel yang saya gunakan untuk penghantaran ini (Google Forms/Sheets, dan perkhidmatan e-mel saya). Maklumat ini tidak dijual, dan tidak dikongsi dengan pihak lain untuk pemasaran mereka.
  • Hak anda. Anda boleh meminta untuk mengakses, membetulkan atau memadam data anda, atau berhenti melanggan, pada bila-bila masa — hantar e-mel ke kenneth@chuinwei.com.
  • Penyimpanan tempoh. Maklumat anda disimpan hanya selama yang diperlukan untuk tujuan di atas.

Dengan menghantar borang ini, anda bersetuju dengan pemprosesan data peribadi anda sebagaimana yang diterangkan.

This page is educational and is not legal advice. The checklist describes obligations as they commonly appear in supplier contracts and does not assess your specific agreement.

Kenneth Wong · kenneth@chuinwei.com · chuinwei.com