Malaysia's AI policy posture is moving fast in 2026. The 2026 Budget allocated meaningful funds across at least eight agencies — RM2 billion to MCMC for a Sovereign AI Cloud, RM53 million for the Malaysia Digital Acceleration Grant, RM18.1 million for the new National AI Office, RM30 million for CyberSecurity Malaysia, RM7 million for MIMOS — and the National AI Action Plan 2026–2030 is being tabled to consolidate the framework.
For corporate decision-makers, AI practitioners, and citizens trying to make sense of the Malaysian AI ecosystem, this is a working map of who does what.
The ministerial layer
1. Ministry of Science, Technology and Innovation (MOSTI)
The lead ministry for Malaysian AI policy. MOSTI spearheaded the National AI Roadmap 2021–2025, the National Guidelines on AI Governance and Ethics, and is leading the National AI Action Plan 2026–2030. MOSTI also oversees several of the agencies below — MIMOS, the National Science Council, and parts of the standards infrastructure.
What it means for you: if you are tracking national AI policy, MOSTI is the primary signal source.
2. Ministry of Digital (KD)
The newer ministry covering digital economy, digital infrastructure, and (increasingly) AI deployment in the public sector. Works closely with MDEC on national digital strategy. Tracks AI adoption and digital readiness across Malaysian businesses.
3. Ministry of Communications (K-KOMM)
Oversees MCMC and the broader communications sector. The 2026 RM2 billion Sovereign AI Cloud allocation — destined for MCMC — sits under K-KOMM's umbrella.
The agency layer
4. National AI Office (NAIO)
The newly-established AI office with six near-term deliverables: action plans, regulatory framework, adaptation and adoption guidelines, AI ethics, impact studies, and data governance, all due at the beginning of 2026. NAIO sits at the centre of Malaysia's AI governance architecture and is funded at RM 18.1 million in the 2026 Budget.
What it means for you: NAIO is becoming the operational heart of Malaysian AI governance. Watch its publications closely.
5. Malaysia Digital Economy Corporation (MDEC)
The agency that operationalises Malaysia's digital and AI economy strategy. MDEC runs the Malaysia Digital programme, which approved US$13.3 billion in investments in Q3 2025 alone, generating 21,815 high-value jobs. MDEC also drives the AI Nation 2030 narrative and partners with private companies on capacity building. The RM53 million Malaysia Digital Acceleration Grant (MDAG) sits under MDEC.
6. MIMOS Bhd
Malaysia's national applied research and development centre, focused on advanced technology research. Funded RM 7 million in the 2026 Budget specifically for blockchain innovation and deepfake detection. MIMOS has long-standing AI research strength in computer vision, signal processing, and bioinformatics.
7. Malaysian Communications and Multimedia Commission (MCMC)
The regulator for the communications and multimedia sector. The 2026 Budget's RM2 billion allocation for a Sovereign AI Cloud is the largest single AI-related line item — a major infrastructure commitment that will shape Malaysian AI deployment for the rest of the decade.
8. National Cyber Security Agency (NACSA)
The lead agency for national cybersecurity coordination. NACSA's role intersects directly with AI through agentic security, prompt injection defence, and the secure deployment of AI in critical infrastructure. Increasingly important as AI is embedded into government and regulated industry systems.
9. CyberSecurity Malaysia (CSM)
The technical agency for cybersecurity matters, sitting under MOSTI. The 2026 Budget allocated RM30 million to CSM specifically to enhance cryptographic security services — directly relevant to AI workflow security and post-quantum readiness.
10. SIRIM Berhad
Malaysia's national standards and industrial research body. SIRIM is increasingly active in AI testing, certification, and standards — work that becomes more important as Malaysian organisations need third-party validation for AI deployments in regulated industries.
11. Bank Negara Malaysia (BNM)
Not an AI-specific agency, but the regulator that has the most direct impact on AI deployment in Malaysian financial services. BNM's RMiT (Risk Management in Technology) policy revised in November 2025 sets the cybersecurity, cloud, and operational risk floor that every AI deployment in a Malaysian bank or insurer must clear.
12. HRD Corp (Human Resources Development Corporation)
The most directly useful agency for any Malaysian organisation actually implementing AI. HRD Corp administers the SBL-KHAS scheme, which makes structured AI training claimable for eligible employers — covering AITraining2U's full programme stack at near-zero net cost. Our HRDC overview explains how to use this in practice.
The 2026 Budget snapshot
How this connects to the private sector
The agencies above operate alongside private-sector consortia, the most prominent being Konsortium AI Negara (KAIN) — the consortium of 30+ Malaysian AI companies (including AITraining2U) working in coordination with the government on national policy. KAIN's role is to ensure the policy framework reflects the actual operational realities of Malaysian AI companies, and to coordinate industry input on the National AI Action Plan 2026–2030.
For corporate AI buyers, the practical implication is that Malaysia's AI policy posture is converging fast — the 2026–2030 window will see substantial regulatory clarification, more structured grants, and clearer audit and governance requirements. Aligning your AI deployments with the emerging governance scaffold now is materially cheaper than retrofitting later.
