KUALA LUMPUR, 7 APRIL 2025 – Generative AI (GenAI) has been creating waves of rapid transformation in industries across the globe. However, businesses continue to face challenges in navigating the risks from rapid AI adoption. Deloitte’s AI at a crossroads report revealed that over half (51%) of Malaysian companies polled continue to face technology implementation challenges, with 37% agreeing that they continue to have an insufficient understanding of the technology and its potential.
With investment in AI across the Asia Pacific region expected to grow fivefold by the end of the decade, reaching $117 billion USD by 2030, GenAI has quickly become the region’s fastest-growing enterprise technology. However, this productivity comes at a cost. While interest for GenAI adoption remains high, 9 in 10 Malaysian companies opined that it also brings security vulnerabilities such as cyber security risks.
“While AI solutions offer powerful productivity tools, this also increases the possibility of data breaches or regulatory fines if these tools are not managed properly,” shared Dr Justin Ong, Financial Services Industry Leader, Deloitte Malaysia. “The Malaysian Communications and Multimedia Commission’s (MCMC) introduction of a regulatory framework for social media services and internet messaging service providers is a step in the right direction, but more needs to be done. Less than 1 in 10 organisations across the Asia Pacific currently have the governance structures necessary to achieve trustworthy AI, which Deloitte has also adopted in our own GenAI initiatives under the Trustworthy AI Framework.”
To assist organisations in taking practical steps to achieving trustworthy AI, Deloitte has introduced an AI Governance Maturity Index. Based on 12 key indicators across five pillars, 91% of organisations were classified as only having ‘Basic’ or ‘In progress’ AI Governance structures in place, highlighting substantial room for improvement in AI governance. The report further revealed that less than 60% of Malaysian organisation employees polled have the required level of skills to use AI solutions in an ethically and legally compliant way.
While the financial services industry (FSI) is one of the leading adopters of digital innovation, the report revealed that only 13% of FSI across the globe were deemed as ‘Ready’ for trustworthy AI. As demand for financial services continue to grow, particularly among younger and more tech literate consumers, good governance is key to ensuring the industry’s long-term advancement, or risk losing out.
“Despite the industry’s efforts to grow cybersecurity measures in recent times, we’ve seen that 42% of financial services organisations polled reported an increase in incidents within the last financial year,” Dr Justin continues. “As a sector that holds sensitive financial information, the financial services industry must increase governance efforts to facilitate the necessary security levels required.”
One of the key risks identified by 84% of Malaysian respondents is the surveillance implications of AI, where pervasive data collection can lead to an erosion of privacy rights. With AI systems being increasingly deployed for security measures such as tracking and facial recognition, there are growing concerns about data privacy and corporate surveillance practices, requiring safeguards to prevent potential misuse of personal information.
Beyond incorporating AI into companies’ business processes, having clearly identified roles within an organisation that are accountable to manage AI standards helps to ensure any emerging AI-related issues are addressed appropriately. For most organisations surveyed, this responsibility lies with senior leadership, with 91% of organisations having a board member or C-suite executive explicitly responsible. In Malaysia, nearly 40% of Malaysian organisations surveyed do not have a system for employees to raise AI-related concerns, suggesting an increased risk for cybersecurity risks such as legal liabilities or harmful AI practices.
Deloitte’s survey involved nearly 900 senior leaders from 13 locations across the Asia Pacific region in one of the most comprehensive stocktakes of AI governance maturity levels to date. Respondents were specifically targeted to be in senior roles like chief risk officers, chief compliance officers and chief data officers across various sectors, including public, private and not-for-profit, and a range of industries (including finance, education, health and technology).
About Deloitte
Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms, and their related entities (collectively, the “Deloitte organisation”). DTTL (also referred to as “Deloitte Global”) and each of its member firms and related entities are legally separate and independent entities, which cannot obligate or bind each other in respect of third parties. DTTL and each DTTL member firm and related entity is liable only for its own acts and omissions, and not those of each other. DTTL does not provide services to clients. Please see www.deloitte.com/about to learn more.
Deloitte Asia Pacific Limited is a company limited by guarantee and a member firm of DTTL. Members of Deloitte Asia Pacific Limited and their related entities, each of which is a separate and independent legal entity, provide services from more than 100 cities across the region, including Auckland, Bangkok, Beijing, Bengaluru, Hanoi, Hong Kong, Jakarta, Kuala Lumpur, Manila, Melbourne, Mumbai, New Delhi, Osaka, Seoul, Shanghai, Singapore, Sydney, Taipei and Tokyo.
This communication contains general information only, and none of DTTL, its global network of member firms or their related entities is, by means of this communication, rendering professional advice or services. Before making any decision or taking any action that may affect your finances or your business, you should consult a qualified professional adviser.
No representations, warranties or undertakings (express or implied) are given as to the accuracy or completeness of the information in this communication, and none of DTTL, its member firms, related entities, employees or agents shall be liable or responsible for any loss or damage whatsoever arising directly or indirectly in connection with any person relying on this communication.
© 2025 Deloitte Southeast Asia Ltd.
Press contact(s):
Samantha Yong
Tel: +603 7624 3502
zeyong@deloitte.com
Maxine Gui
Tel:+603 7610 8954
maxgui@deloitte.com