Penetration Test Service Provider: How to Apply

Requirement

Business Legitimacy Criteria

The Applying company must be recognized as a legal entity with the following minimum legal criteria:

1. Registered with SSM
2. Minimum 50% Locally Owned
3. Head Office in Malaysia
4. Registered with Ministry of Finance (MOF) Malaysia
5. Must be at least two (2) years in operation

The Scheme Process

1. Apply

1. Interested candidate needs to fill in PTSP application form.
2. Submit to ISCB once the application form completely fills.

2. Accept

1. ISCB will perform pre-assessment which consist of review the documents and evidence based on PTSP requirements.
2. Once accepted, registration application prepared by establish quotation, audit plan, certification agreement and related documents.

3. Execute

1. Perform/conduct onsite and offsite audit to verify the conformity against the PTSP Program requirements
2. Resolve any finding or non-conformity (if any)
3. Develop the audit report for approval process.

4. Certify

1. Present the final audit report for management approval
2. Once approve, the successful candidate will be given as below; Certificate - a certificate to acknowledge that the companies has been audited and certified

5. Register

The service providers’ details will be published on ISCB website.

Each Service Provider applicant must pay an application processing fee. All fees are invoiced by CyberSecurity Malaysia and must be paid to CyberSecurity Malaysia according to the instructions accompanying the invoice. 

 Upon successful registration to the PTSP Scheme, an Invoice for Registration fees must be paid before successful Service Provider is listed in the Register. 

Please complete the application form and send to This email address is being protected from spambots. You need JavaScript enabled to view it.

PTSP Application Form