
ISACA Malaysia Cybersecurity, IT Assurance and Governance (CIAG) Conference 2026
| Monday–Thursday, 17–20 August 2026
| 8:45 AM – 5:30 PM (UTC +8)
| Sheraton Petaling Jaya Hotel
| Physical Event
Featuring 2 Pre-Conference Workshops (17–18 August) and the Main Conference (19–20 August).
About the Conference:
The ISACA Malaysia Cybersecurity, IT Assurance & Governance (CIAG) Conference returns for its 24th edition, continuing its tradition as the chapter’s flagship annual conference. Since its debut in 2002, CIAG has brought together cybersecurity, IT governance, risk, assurance, and compliance professionals to exchange ideas, share experiences, and stay ahead of emerging industry trends.
Held as a fully physical event, CIAG 2026 will feature renowned local and international experts through keynote presentations, panel discussions, and masterclasses. This year’s conference is centred on the theme, “The Digital Resilience Mandate: Governing Trust, Quantifying Risk, and Ensuring Compliance in the Quantum-AI Era,” exploring how organisations can build trust and resilience in an increasingly AI-driven world.
Why Attend?
Stay ahead of the latest developments in cybersecurity, AI governance, and digital resilience while learning from industry experts who are shaping the future of technology, risk, and compliance.
Whether you’re responsible for governance, audit, cybersecurity, risk management, or digital transformation, CIAG 2026 offers practical perspectives, meaningful discussions, and valuable networking opportunities to help you navigate today’s rapidly evolving digital landscape.
Key Takeaways:
Event Details:
Pre-Conference Workshops:
Before the main conference, choose from two specialised pre-conference workshops led by internationally recognised experts. Each workshop focuses on a different area and is designed to provide practical knowledge, interactive discussions, and real-world applications.
Workshop 1
AI Risk Management Bootcamp: Turning AI Ambition into Action
As AI adoption accelerates across industries, organisations face new challenges in managing AI-related risks. This hands-on bootcamp helps participants move beyond theory by providing practical approaches to managing AI risks across the entire lifecycle from strategy and procurement to deployment, monitoring, and oversight.
Through real-world scenarios, interactive exercises, and proven governance approaches, participants will gain the knowledge and confidence to support responsible AI adoption while protecting their organisation, customers, and reputation.
Best Suited For:
- Risk Officers
- Compliance Managers
- Business Leaders
Instructor:
Mary Carmichael
Field CISO, Western Canada,
Bell Cyber
Workshop 2
Human Risk Management Workshop: Addressing Deepfakes, AI-Enabled Threats, and Safer AI Use
This workshop explores how AI-enabled threats, deepfakes, and human behaviour are changing today’s cybersecurity landscape. Through practical scenarios and interactive discussions, participants will learn how organisations can strengthen human resilience, reduce risk, and encourage safer, more responsible AI use.
Best Suited For:
- Security Practitioners
- HR Professionals
- IT Auditors
Instructor:
Brian Hay APM
Executive Director,
Cultural Cyber Security Pty Limited
Registration Fees:
All fees are quoted in Malaysian Ringgit (MYR) and are inclusive of SST.
Speakers:

Mary Carmichael
Field CISO, Western Canada, Bell Cyber
Leading: AI Risk Management Bootcamp: Turning AI Ambition into Action
Mary Carmichael is the Field CISO for Western Canada at Bell Cyber, where she advises executives and boards on cybersecurity, AI, and technology risk. With over 15 years of experience in audit, risk, and cybersecurity, she helps organisations manage risks arising from third parties, emerging technologies, and complex digital ecosystems.
A CPA and holder of CISA, CISM, and CRISC certifications, Mary is also an AI & Cybersecurity Research Fellow at Toronto Metropolitan University’s Rogers Cybersecure Catalyst, focusing on third-party AI risk management. She previously served as President of the ISACA Vancouver Chapter and is currently a Global SheLeadsTech Advocate. In 2026, she received the ISACA Global Chapter Leadership Award and was recognised as an SC Media Women to Watch honouree.

Brian Hay APM
Executive Director, Cultural Cyber Security Pty Limited
Leading: Human Risk Management Workshop: Addressing Deepfakes, AI-Enabled Threats, and Safer AI Use
Brian Hay APM is a recognised cybersecurity leader with extensive experience spanning law enforcement, consulting, and executive leadership. His work focuses on helping organisations strengthen security through people, culture, cyber intelligence, and incident response rather than technology alone.
A former Detective Superintendent with the Queensland Police, Brian led the Fraud & Cyber Crime Group and played a key role in several national cybercrime initiatives in Australia. He later held senior leadership roles with Unisys and Dimension Data before founding Cultural Cyber Security Pty Limited. Brian is an internationally recognised speaker, recipient of the Australian Police Medal and multiple cybersecurity awards, and was recently appointed an Industry Professor in recognition of his contributions to the field.




















