From Legal Text to Working Controls: EVYD Technology Applies Incident Playbooks and Recover Testings to AI Applications
17 September 2026, Bandar Seri Begawan – Keeping cyber-attacks out entirely is no longer realistic anymore. For years, organizations approached cybersecurity like building a bigger wall or a strong firewall. In today’s highly interconnected world, relying solely on a ‘perimeter’ defence is no longer a failsafe. Human errors cannot be fully eliminated, and artificial intelligence (AI) has supercharged the speed and sophistication of modern hackers, causing a shift in conversation and intention from cybersecurity to cyber resilience and how fast we can survive and recover from cyber threats that inevitably broke through.
Thus is the theme for Brunei’s annual Cybersecurity Conference 2026 that took place on 15-16 September 2026 at The Rizqun International Hotel, Gadong. EVYD Technology premiered in its inaugural participation as a Gold Sponsor to support this narrative alongside hosts Brunei Cybersecurity Association and Cyber Security Brunei.
At the 2-day event, EVYD offered delegates insights into its security capabilities through used cases from working alongside Brunei’s Ministry of Health (MOH) and BruHealth application, including the 9-month journey to fully comply with the country’s data protection law that took effect on 1 January 2026.
On hand to receive this year’s Guests of Honor Yang Berhormat Dato Seri Setia Awang Mohd Riza bin Dato Paduka Hj Mohd Yunos, Minister of Transport and Infocommunications and Minister-in-charge of Cybersecurity in Brunei Darussalam and Yang Berhormat Dato Seri Setia Awang Haji Sufian bin Haji Sabtu, Minister of Prime Minister’s Office (Security and Law) at EVYD booth were EVYD Regional Head & General Manager, Dr Abby Tan and EVYD Head of Security and Corporate IT, Mr Tang Yu.
Why This Year’s Theme Matter
In a country as connected as Brunei Darussalam, industry sectors like healthcare, finance, and government share a lot of the same systems which can create structural vulnerability for cyber threats and malicious intentions to spread easily. Cyber resilience therefore becomes a definitive defence in shared environments like this because it shifts focus from trying to achieve impossibly perfect security to surviving an inevitable attack.
The Brunei Cybersecurity Conference 2026 provides a platform for local and regional tech leaders, technical defenders, government officials and policymakers to share their experiences and intelligence, learn from these shared lessons and ‘immunize’ a unified defence across the entire ecosystem.
“We treat healthcare as a critical infrastructure. Working with MOH and BruHealth comes down to the doctors getting the right record when they need it whilst keeping the data safe,” explains EVYD Head of Security & Corporate IT, Mr Tang Yu. “We built security controls into the BruHealth platform so that our client MOH don’t have to assemble controls like defence in depth, 24/7 security operations, external checks like ISO 27001, SOC 2, PDPA/PDPO and HIPAA separately. We also work with MOH on incident playbooks and recovery testing, and we are applying the same controls to our AI work.”
Key Takeaway
Compliance written in a policy document is only a promise. What protects is the defences built into the system. The Brunei Cybersecurity Conference therefore helps bridge the gap between policy and practice, ensuring that realistic regulations can be enforced rather than theoretical ones and that strategic budgeting can be allocated for maximum defence capabilities.
Relying on humans to strictly follow complex privacy laws during a data breach or a high-volume rush of user requests is a recipe for catastrophic human error. By hardcoding these legal requirements directly into the architecture of an organization’s systems, compliance becomes effortless, consistent and independent of human memory.
“Consent becomes a deletion job. Data subject requests become an API. Breach notification becomes an alert with a clock on it. On paper, it depends on people remembering under pressure but if built in, it just runs!” concludes Tang Yu.
About EVYD Technology
EVYD Technology is a Southeast Asia-based healthcare technology company with a vision to build a future where everyone can access better health. We leverage our deep expertise in healthcare data processing and AI to enable our partners to gain insights for informed decision making in healthcare and implement personalized health promotion, risk assessment and chronic disease management programmes at scale to improve population health outcomes.
Leave a comment
You must be logged in to post a comment.