Awards, Recognition & Industry Accreditations
How we benchmark nCrypt Malaysia against the international cybersecurity industry — the frameworks we audit ourselves against, the partner ecosystem we operate within, and the awards we pursue.
Our recognition philosophy
Cybersecurity is a trust business. In Malaysia, where most cybersecurity vendor selection happens in regulated environments — Bank Negara Malaysia supervision, NACSA NCII oversight, SC capital-market intermediaries — what matters is not marketing-driven award logos but the substantive frameworks a firm chooses to be measured against.
We publish the standards we hold ourselves to, the partner ecosystem we belong to and the industry awards we pursue. We also publish where we are still building. The goal is transparency, not a wall of plaques.
Frameworks we audit ourselves against
CREST Standard for Penetration Testing
The international gold-standard for technical, methodological and ethical conduct of penetration testing services. Adopted by Bank Negara Malaysia as the de facto cadence for financial-sector pentest providers.
ISO/IEC 27001:2022 ISMS
Our own information-security management is built and audited against the ISO 27001 control framework. We use the same Annex A controls and risk-treatment approach we recommend to clients.
NIST Cybersecurity Framework 2.0
We benchmark our delivery and internal controls against the NIST CSF functions — Govern, Identify, Protect, Detect, Respond, Recover — and publish internal scorecards quarterly.
Bank Negara Malaysia RMiT
Our financial-services practice is structured to deliver against every clause of the RMiT Policy Document — particularly 10.49 (intelligence-led testing), 10.66 (third-party assurance) and the cyber resilience chapter.
Cyber Security Act 2024 (Act 854)
We track our own readiness to support NCII sector lead and entity obligations under Act 854 and the supporting Cybersecurity Service Provider regulations.
PDPA 2024 amendments
We audit our data-handling practices against the strengthened PDPA 2024 regime, including mandatory breach notification timelines and Data Protection Officer requirements.
Partner ecosystem
CREST
International accreditation body for technical security service providers
PECB
Training partner for ISO 27001, ISO 27005 and ISO 22301 lead-implementer/auditor certifications
PCI Security Standards Council
PCI ASV scanning programme and PCI DSS advisory ecosystem
MITRE ATT&CK
Open framework we use to map adversary TTPs across red team and intelligence-led engagements
Industry awards we pursue
These are categories we benchmark our delivery quality and case studies against. We list them publicly to be transparent about our targets — not to imply prior wins. Award entries are submitted only when we believe our delivery evidence stands up to independent judging panels.
- • Cybersecurity Excellence Awards — Penetration Testing Service Provider category
- • ASEAN Cybersec Awards — Best Penetration Testing Service
- • Cybersecurity Asia Awards — Best Compliance Advisory Firm
- • SC Awards Asia — Best Managed Detection & Response
- • GovInsider Innovation Awards — Public-sector cybersecurity partner
For current firm-level status, regulatory applications, ISO 27001 audit progress, PCI ASV programme status and NACSA Cybersecurity Service Provider licence progress, please see our accreditations page, which is kept current with effective dates where available.
Want the full evidence pack?
We can share methodology documentation, sample reports (redacted), accreditation certificates and references on request as part of any procurement evaluation.
Not sure what you need?
Tell us what needs testing and we come back with a fixed fee within 48 hours — no hourly estimates.