Supplier Security Obligations — Self-Assessment Checklist

Supplier Security Obligations — Self-Assessment Checklist

This is a free, 30-minute self-assessment for Malaysian businesses that supply goods or services to other organisations. When a customer is subject to the Cyber Security Act 2024 — or is simply cautious — its compliance duties reach you through your contract: data-protection clauses, breach-notification deadlines, audit rights, certification warranties. This checklist helps you find those obligations in your own agreement and, more importantly, test whether you could actually prove you meet them if the customer asked.

You work through it privately, with your contract in front of you. Your answers stay with you — nothing you tick is submitted anywhere.

Get the checklist

Enter your name and email below and you’ll get the download link as soon as you submit. I collect only your name and email, and only to send you the checklist (and, occasionally, related updates you can opt out of at any time). The full Personal Data Protection Notice, in English and Bahasa Malaysia, is just below the form.

Form not loading? Open it in a new tab.


Personal Data Protection Notice

When you request this checklist, chuinwei.com (Kenneth Wong) collects your name and email address.

  • Purpose. To send you the checklist and, occasionally, related updates about the Cyber Security Act 2024 and supplier security.
  • Voluntary. Providing these details is voluntary; if you choose not to, I simply won’t be able to send you the checklist.
  • Storage and disclosure. Your details are held in the form and email services I use to deliver this (Google Forms/Sheets, and my email service). They are not sold, and not shared with anyone else for their own marketing.
  • Your rights. You may ask to access, correct or delete your data, or unsubscribe, at any time — just email kenneth@chuinwei.com.
  • Retention. Your details are kept only as long as needed for the purposes above.

By submitting the form, you consent to your personal data being processed as described.

Notis Perlindungan Data Peribadi

Apabila anda memohon senarai semak ini, chuinwei.com (Kenneth Wong) mengumpul nama dan alamat e-mel anda.

  • Tujuan. Untuk menghantar senarai semak ini kepada anda dan, sekali-sekala, maklumat berkaitan Akta Keselamatan Siber 2024 dan keselamatan pembekal.
  • Secara sukarela. Pemberian maklumat ini adalah secara sukarela; jika anda memilih untuk tidak memberikannya, saya tidak akan dapat menghantar senarai semak ini kepada anda.
  • Penyimpanan dan pendedahan. Maklumat anda disimpan dalam perkhidmatan borang dan e-mel yang saya gunakan untuk penghantaran ini (Google Forms/Sheets, dan perkhidmatan e-mel saya). Maklumat ini tidak dijual, dan tidak dikongsi dengan pihak lain untuk pemasaran mereka.
  • Hak anda. Anda boleh meminta untuk mengakses, membetulkan atau memadam data anda, atau berhenti melanggan, pada bila-bila masa — hantar e-mel ke kenneth@chuinwei.com.
  • Penyimpanan tempoh. Maklumat anda disimpan hanya selama yang diperlukan untuk tujuan di atas.

Dengan menghantar borang ini, anda bersetuju dengan pemprosesan data peribadi anda sebagaimana yang diterangkan.


This page is educational and is not legal advice. The checklist describes obligations as they commonly appear in supplier contracts and does not assess your specific agreement.

Kenneth Wong · kenneth@chuinwei.com · chuinwei.com