Q3. How does KWAP manage cybersecurity, compliance, and business continuity as part of this transformation?

Maz Mirza: Cybersecurity and compliance are non-negotiable at KWAP, especially when you manage sensitive financial data for fund investments and the nation's pensioners. Our approach goes beyond IT function, it's integrated across legal, risk management, and compliance teams. We have established a dedicated data privacy practice group and appointed a Data Protection Officer (DPO) from our legal team, in line with government requirements.

We adopt recognised frameworks such as Rangka Kerja Keselamatan Siber Sektor Awam (RAKKSSA) and align our processes with ISO 27001 standards to maintain a robust security environment. Our internal audit and compliance teams ensure adherence to these standards through continuous assessments.

At a strategic level, we continually review our policies and practices, identifying areas for improvement across the eight pillars of the RAKKSSA framework. This comprehensive approach ensures our digital infrastructure remains secure, compliant, and resilient, supporting both business continuity and the trust of our stakeholders.

Our 2022 organisational transformation elevated IT to a strategic level, reflecting the growing importance of digital strategy in supporting KWAP's overall mission.

Q5. What does a future-ready, fully digital KWAP look like to you — and what technologies or strategies are you prioritising to build the culture that supports it?

Maz Mirza: A future-ready KWAP is one where digital is embedded in how we think and operate, not just in our tools. We are fostering a culture of digital curiosity across the organisation, introducing emerging technologies like AI prompting and Robotic Process Automation (RPA). But tech alone isn't enough, we're educating our people about what these tools are and how they can be used to solve real problems.

We've also implemented a robust data governance framework based on the Data Management Association (DAMA) principles to manage our growing data footprint. This includes appointing data owners and stewards across departments and classifying over 300 critical data elements during the initial implementation.

As data is the foundation for AI and advanced analytics, governance plays a crucial role in ensuring not just data quality, but also clear accountability. Today, the data governance structure is part of our broader Digital Technology Committee, a reflection of how integral data management has become to our digital and enterprise strategy.