Our Training Programmes
Search and browse every Orbix training programme, from one-day awareness courses to certification preparation, delivered in-house or online across Malaysia.
Browse training programmes
| Course | Duration | Description |
|---|---|---|
| AI, Security & Governance Fundamentals | All 1 Day | ||
| AI-Powered Scams & Deepfake Awareness | 1 day | Spot impersonation attempts using fake voices, videos, messages and profiles, then verify requests through a trusted channel. |
| Secure AI Use at Work | 1 day | Use approved AI tools without exposing confidential information, accepting unchecked answers or granting unnecessary access. |
| Microsoft 365 Security Awareness | 1 day | Use Outlook, Teams, OneDrive and company accounts more safely, with practical checks for messages, sign-ins and shared files. |
| Cyber Incident Response & Data Breach Management | 1 day | Practise reporting, coordinating and documenting a cyber incident, including the questions that determine personal data breach escalation. |
| Cybersecurity for HR & Administration | 1 day | Protect employee records, payroll instructions, recruitment information and sensitive administrative documents. |
| SOC 1 Fundamentals | 1 day | Understand controls over outsourced financial reporting, Type 1 and Type 2 reports, and the evidence behind a SOC 1 examination. |
| SOC 2 Fundamentals | 1 day | Learn SOC 2 fundamentals: Trust Services Criteria, Type 1 and Type 2 reports, basic controls, evidence and a first readiness checklist. |
| AI Agent Security & Reliability (AIUC-1) Fundamentals | 1 day | One-day AIUC-1 fundamentals training: AI agent risks, the six domains, safeguards, evaluation evidence and responsible deployment decisions. |
| Information Security Management (ISO/IEC 27001) Fundamentals | 1 day | One-day ISO/IEC 27001:2022 fundamentals: ISMS scope, risk assessment, Annex A, the Statement of Applicability and the certification journey. |
| Personal Data Protection (Malaysia PDPA) Fundamentals | 1 day | Understand how organisations collect, use, store and protect personal information under Malaysia's PDPA. |
| AI Governance & Management (ISO/IEC 42001) Fundamentals | 1 day | Learn how companies organise rules, responsibilities and controls for developing and using AI. |
| Privacy Information Management (ISO/IEC 27701) Fundamentals | 1 day | Learn how organisations organise personal data protection responsibilities through a privacy information management system. |
| Cybersecurity Risk Management (NIST CSF 2.0) Fundamentals | 1 day | Learn how organisations identify cybersecurity risks and decide what to protect first using NIST CSF 2.0. |
| AI Risk Management (NIST AI RMF) Fundamentals | 1 day | Learn how organisations identify, assess and reduce risks from AI systems using the NIST AI Risk Management Framework. |
| Risk Management (ISO 31000) Fundamentals | 1 day | Learn how businesses identify, assess and manage operational and business risks using ISO 31000. |
| Business Continuity Management (ISO 22301) Fundamentals | 1 day | Learn how organisations prepare to continue priority services during disruptions using a business continuity management system. |
| Compliance Management (ISO 37301) Fundamentals | 1 day | Learn how organisations build a system for meeting laws, regulations and internal policies using ISO 37301. |
| Information Security Risk Management (ISO/IEC 27005) Fundamentals | 1 day | Learn how to assess information security threats and decide which risks need treatment using ISO/IEC 27005. |
| Anti-Bribery Management (ISO 37001) Fundamentals | 1 day | Learn how organisations prevent bribery, corruption and improper business conduct through an anti-bribery management system. |
| AI Governance & Ethics (Malaysia AIGE) Fundamentals | 1 day | Learn how Malaysian organisations use AI responsibly and ethically through the National Guidelines on AI Governance and Ethics. |
| Responsible AI (Malaysia AICE) Fundamentals | 1 day | Learn how to put responsible AI principles into practical business processes using Malaysia's voluntary AI Code of Ethics. |
| AI Governance for Directors & Management Fundamentals | 1 day | Learn what directors and senior management should ask about AI risks, responsibilities and oversight. |
| Public Sector AI Governance (JDN Guidelines) Fundamentals | 1 day | Learn how government agencies organise safe and responsible AI adoption using JDN's public sector AI guidance. |
| AI Security Verification (OWASP AISVS) Fundamentals | 1 day | Learn how to check whether an AI-enabled application has appropriate, testable security controls. |
| AI Agent Security (OWASP Agentic Top 10) Fundamentals | 1 day | Learn the main security risks when AI agents can use tools, make decisions and perform tasks independently. |
| Generative AI Security (OWASP LLM Top 10) Fundamentals | 1 day | Learn how to reduce risks from AI chatbots leaking data, following malicious instructions or mishandling their outputs. |
| AI Agent Runtime Security (OWASP Agent Control Standard) Fundamentals | 1 day | Learn how runtime controls can restrict what AI agents access and do within business systems. |
| AI Security Controls (CSA AICM) Fundamentals | 1 day | Learn how to use the Cloud Security Alliance AI Controls Matrix to organise safeguards for AI systems. |
| Agentic AI Governance (Singapore MGF) Fundamentals | 1 day | Learn how businesses oversee AI agents that can make decisions and perform actions using Singapore's Model AI Governance Framework. |
| Web Application Security (OWASP Top 10) Fundamentals | 1 day | Learn how to recognise and reduce common security weaknesses in websites and business applications. |
| Payment Card Data Security (PCI DSS) Fundamentals | 1 day | Learn how businesses handle payment card information securely and understand their PCI DSS responsibilities. |
| Cloud Security (ISO/IEC 27017) Fundamentals | 1 day | Learn how cloud customers and providers share responsibility for securing cloud services and information. |
| Cloud Privacy Protection (ISO/IEC 27018) Fundamentals | 1 day | Learn how public cloud providers acting as processors protect customers' personal information. |
| AI Impact Assessment (ISO/IEC 42005) Fundamentals | 1 day | Learn how to assess possible effects on people and society before and during AI deployment. |
| AI Management System Auditing (ISO/IEC 42006) Fundamentals | 1 day | Understand how competence, impartiality and consistent assessment support credible auditing of AI management systems. |
| AI Agent Protocol Security (OWASP MCP Top 10) Fundamentals | 1 day | Learn how to protect AI connections to documents, databases and tools through Model Context Protocol services. |
| AI Agent Skills Security (OWASP AST10) Fundamentals | 1 day | Learn how to reduce risks from malicious, over-privileged or poorly maintained AI agent skills. |
| AI Governance for Financial Services (MAS SAFR) Fundamentals | 1 day | Learn how runtime safeguards govern AI agents' authority, human oversight and decision records in financial services. |
| GDPR Fundamentals | 1 day | One-day GDPR fundamentals for Malaysian teams: applicability, principles, lawful bases, individual rights, security, breach response and transfers. |
| Ransomware Awareness & Prevention | 1 day | Understand how ransomware disrupts work, reduce everyday exposure and recognise the steps staff should escalate immediately. |
| Data Privacy & Secure Information Handling | 1 day | Handle customer, employee and business information safely when collecting, sharing, storing, printing and disposing of records. |
| Business Email Compromise Prevention | 1 day | Prevent payment diversion through independent verification of executive instructions, supplier bank changes and invoice requests. |
| Cybersecurity for Remote & Hybrid Workers | 1 day | Protect company accounts, devices and information while working at home, travelling or using approved personal devices. |
| Cloud Security Awareness | 1 day | Make safer decisions about cloud accounts, shared links, uploaded files and third-party applications used in everyday work. |
| Supply Chain & Third-Party Cyber Risk | 1 day | Recognise how supplier access, shared data and service outages can create cyber risks for your organisation. |
| Cyber Security Act 2024 Awareness & NACSA Readiness | 1 day | Understand Malaysia's Cyber Security Act, assess which roles may apply and identify the organisational questions that need follow-up. |
| Security Incident Tabletop Exercise | 1 day | Rehearse decisions, escalation and communications during a fictional cyber incident, then turn lessons into an owned action plan. |
| Mobile Device & WhatsApp Security | 1 day | Protect phones and messaging accounts, check suspicious requests and respond to lost devices or unfamiliar linked sessions. |
| Passwordless Security & Identity Protection | 1 day | Understand passkeys, MFA and account recovery, and practise safer decisions when a sign-in or identity request appears suspicious. |
| AI & Digital Skills | ||
| AI Fundamentals for Business | 2 days | Understand what AI can realistically do for your business, which tools are worth adopting, and how it reshapes cybersecurity risk. |
| Generative AI for Work | 1 day | Learn how to use ChatGPT and other generative AI tools to cut hours off routine writing, research and reporting. |
| Generative AI for Academic & Administrative Productivity | 1 day | Your lecturers are already using it. This gives them the craft, and gives the institution a line on integrity and student data. |
| AI in the Workplace | 1 day | Set clear rules for staff using ChatGPT, Copilot and Gemini, so productivity gains do not turn into data leaks. |
| Prompt Engineering for Professionals | 1 day | Learn how to write prompts that get accurate, on-brand AI output first time, instead of generic text you rewrite anyway. |
| AI Professional Certification Programme | 1 or 2 days | Move beyond everyday AI use into implementing AI projects, engineering prompts at scale, and governing responsible use. |
| AI for Business Leaders | 1 day | The executive view: where AI creates advantage, what it costs, what it risks, and how to tell a real use case from a demo. |
| No-Code Automation for Business Efficiency | 1 day | Automate the repetitive work without waiting for IT. Connecting the tools you already pay for, with the governance to keep it from becoming shadow IT. |
| AI for Data Analysis & Report Writing | 1 day | Use AI to interrogate a dataset and draft the report, with the verification discipline that keeps a confident wrong answer out of your board pack. |
| AI for Finance: Budgeting, Forecasting & Reporting | 2 days | Two hands-on days for finance teams using Excel with ChatGPT or Copilot to build budgets, forecasts, variance analysis and management commentary they can defend. |
| Cybersecurity | ||
| Cybersecurity Awareness | 1 day | Teach every employee to spot phishing emails, malware and social engineering before they click, in one practical day. |
| Cybersecurity Fundamentals | 1 day | Build the security fundamentals your staff need: how attacks work, where networks are exposed, and which habits actually protect you. |
| Cybersecurity Advanced & Governance | 2 days | Strengthen cybersecurity governance, PDPA compliance, risk management and incident response, with live simulations and Malaysian case studies. |
| Cybersecurity for Finance Teams | 1 day | Protect your finance team from invoice fraud, payment diversion and vendor impersonation, the scams that cost Malaysian companies most. |
| Cybersecurity for Executives & Board | 1 day | Give directors and senior management enough cyber risk literacy to ask the right questions and approve the right spending. |
| Ransomware & BEC Awareness | 1 day | Understand how ransomware and business email compromise actually unfold, and what your staff must do in the first hour. |
| Fraud & Scam Prevention Awareness | 1 day | The vendor emailed new bank details and finance nearly paid it. Red flags, verification habits, and who to call in the first hour. |
| Cybersecurity for Non-IT Staff | 1 day | Practical security habits for employees outside IT, the people attackers target first because nobody ever trained them. |
| ISO 27001 Internal Auditor | 2 days | Clause 9.2 requires internal audits and most organisations have nobody trained to run one. Two days of audit practice against a real ISMS. |
| ISO 27001 Lead Implementer | 2 days | Build the ISMS rather than read about it. Two days from scoping and risk methodology through to the Statement of Applicability and the certification plan. |
| Phishing & Social Engineering Awareness | 1 day | Train staff to recognise, avoid and correctly report phishing and social engineering attempts, using real Malaysian examples. |
| Cloud Security Fundamentals | 2 days | Learn how to secure workloads on AWS, Azure and Google Cloud, and where cloud misconfiguration quietly exposes your data. |
| Incident Response & Digital Forensics | 2 days | Build the skills to detect, contain, investigate and recover from a cyber incident without destroying the evidence. |
| CompTIA Security+ (SY0-701) Exam Preparation | 2 days | The baseline security certification most Malaysian employers ask for by name. Two days across all five exam domains, with practice questions throughout. |
| CompTIA CySA+ (CS0-003) Exam Preparation | 2 days | The analyst certification that follows Security+. Detection, threat hunting, vulnerability management and incident response, for people who work a queue. |
| ISC2 Certified in Cybersecurity (CC) Exam Preparation | 1 day | The entry-level ISC2 credential, with no experience requirement. One day across all five domains for career changers and non-security IT staff. |
| Certified Ethical Hacker (CEH) Exam Preparation | 2 days | Offensive security from the defender's side of the table. Two days across the attack lifecycle, for people who need to test their own environment. |
| School Programmes | ||
| CyberSafe for Schools: Internet Safety & Digital Awareness | 1 day | Teach students, teachers and parents how to stay safe online, recognise cyber threats and behave responsibly on digital platforms. |
| Integrity & Governance | ||
| Integrity & Anti-Corruption Awareness | 1 or 2 days | Give staff a shared understanding of what corruption looks like, what the law expects of them, and how to report it safely. |
| Corruption Risk Management (CRM) Workshop | 1 or 2 days | Learn how to run a Corruption Risk Management exercise: map where corruption could occur, score the risks and build real controls. |
| Organizational Anti-Corruption Plan (OACP) Workshop | 1 or 2 days | Build an Organisational Anti-Corruption Plan that turns commitment into governance, controls and measurable targets your board can track. |
| Anti-Bribery Certification for G7 Contractors (MS ISO 37001) | 2 days | Two days for G7 contractors implementing MS ISO 37001 under CIDB Pekeliling Bil. 1/2026: construction bribery risks, controls, evidence and certification. |
| Section 17A Adequate Procedures: Building the Evidence and Defence File | 2 days | Two days on proving adequate procedures under Section 17A of the MACC Act: testing controls against T.R.U.S.T., building the evidence file and rehearsing a MACC inquiry. |
| Whistleblower Protection Act 2010 (Act 711) and the 2025 Amendments | 1 day | One day on when whistleblowers are actually protected in Malaysia, what the 2025 amendments will change once in force, and designing a speak-up channel that works. |
| Responding to Auditor-General, PAC and MACC Inquiries | 1 day | One day for public entities, GLCs and companies on responding to audit findings, Public Accounts Committee proceedings and MACC investigations, and fixing what they find. |
| Integrity, Conflict of Interest & Anti-Bribery Awareness | 1 day | The supplier is your cousin and the hamper arrived mid-tender. Where the line actually sits, and which form to fill in. |
| Corporate Governance & Integrity | 1 or 2 days | Clarify how boards, management and employees each uphold accountability and transparency, and where governance usually breaks down. |
| Integrity and Governance Unit for Companies and GLCs | 2 days | Two days on setting up and running an Integrity and Governance Unit (IGU): Chief Integrity Officer role, mandate, core functions and board oversight. |
| Integrity and Governance in the Public Service | 2 days | Two days for public agency Integrity and Governance Unit heads and officers: legal basis, six core functions, CeIO accreditation and MACC reporting. |
| Board Directorship: Duties & Liabilities | 1 or 2 days | What a board seat legally commits you to: statutory duties under the Companies Act 2016, personal liability and disqualification, conflicts of interest and related party transactions, and how minutes protect a decision. |
| Governance of Statutory Bodies, GLCs and Their Subsidiaries | 2 days | Two days for boards and management of statutory bodies, public universities, GLCs and their holding companies on approvals, subsidiary oversight and accountability. |
| Limits of Authority and Board Approval Controls | 1 day | One day on delegation of authority: approval matrices, board reserved matters, payment controls, split payments and the evidence that proves a decision was authorised. |
| Investment Governance and Project Due Diligence | 2 days | Two days on governing investments and capital projects: investment committees, feasibility, due diligence, value for money, approvals, staged funding and monitoring. |
| Company Secretarial Practice (Companies Act 2016 & Beneficial Ownership) | 2 days | Statutory registers, resolutions, meetings, SSM filings and the beneficial ownership regime, for the people who actually keep the records. |
| Fraud Risk & Internal Control | 1 day | Spot fraud before it costs you: the fraud triangle, procurement and payroll red flags, COSO controls, and your Section 17A exposure under the MACC Act with a T.R.U.S.T. adequate procedures self-assessment. |
| Enterprise Risk Management (ERM) | 2 days | Run risk management as a system rather than a spreadsheet: ISO 31000 and COSO ERM, risk appetite, registers that stay alive, key risk indicators, the three lines model and board-level risk reporting. |
| Business Continuity Management (BCM/BCP) & Crisis Leadership | 2 days | Business impact analysis, RTO and RPO, continuity strategy and plan writing, then standing up a crisis team and running it through a live tabletop exercise. Aligned to ISO 22301. |
| Procurement Integrity & Conflict of Interest | 1 or 2 days | Protect your highest corruption-risk function with procurement ethics, conflict of interest rules and proper vendor due diligence. |
| Government Procurement Act 2026 (Act 882): Supplier and Contractor Readiness | 1 day | One day for companies that sell to government on Act 882, gazetted 26 May 2026: registration, disclosure of interests, the novation offence, review panels and the Appeal Tribunal. |
| AI for Governance & Compliance | 1 or 2 days | Use generative AI to draft policies, support risk assessments and prepare compliance documentation, without creating new governance problems. |
| Leadership for Ethical Organisations | 1 or 2 days | For senior leaders: build the habits that set culture, because leaders shape ethical behaviour far more than any policy does. |
| Workplace Compliance for Managers (Employment Act, Domestic Inquiry & Termination) | 1 day | Handle discipline, domestic inquiry, grievances and termination lawfully under the Employment Act, and reduce your exposure to unfair dismissal claims. |
| Anti-Sexual Harassment (Act 838) & Workplace Anti-Bullying | 1 day | The Act 838 tribunal is open and the Employment Act already requires you to inquire and to display the notice. This is the course that makes both real. |
| Managing Poor Performance & Performance Improvement Plans (PIP) | 1 day | The performance track, kept separate from misconduct: setting measurable standards, holding the conversation, designing a PIP that is genuine rather than a formality, and documenting it so it holds if the employment ends. |
| Retrenchment, VSS/MSS & Lawful Workforce Reduction | 1 day | Reducing headcount without creating claims: genuine redundancy, selection criteria and LIFO, Form PK notification, termination benefits, lay-off and pay reduction alternatives, and designing a VSS or MSS that holds. |
| Compliance & Awareness | ||
| Banking Compliance Professional Training | 1 day | Cover the core pillars of banking compliance in one intensive day, built for staff and management at licensed financial institutions. |
| Anti-Money Laundering and Counter Financing of Terrorism (AML/CFT) Staff Awareness Training | 1 day | Introduce frontline staff at reporting institutions to anti-money laundering duties, red flags and suspicious transaction reporting. No prior knowledge needed. |
| Anti-Money Laundering and Counter Financing of Terrorism (AML/CFT) Compliance Officer Essentials | 1 day | Everything a newly appointed AML/CFT Compliance Officer at a DNFBP or non-bank financial institution needs to run the function properly. |
| Anti-Money Laundering and Counter Financing of Terrorism (AML/CFT) Compliance Officer Advanced | 2 days | Two days of practitioner-level AML/CFT work for experienced compliance officers: complex cases, risk assessment and regulatory examination readiness. |
| Sanctions Screening and Targeted Financial Sanctions (TFS) Compliance | 2 days | Two days on the screening failures behind BNM's recent penalties: list currency, who to screen, fuzzy matching, alert handling, freezing and reporting. |
| Islamic Finance & Shariah Governance (BNM Shariah Governance Framework) | 2 days | Two days on BNM's Shariah Governance Framework: Shariah Committee composition, the Shariah governance structure, product approval, and Shariah non-compliance risk. |
| Insurance & Takaful Compliance (BNM-Regulated Insurers and Operators) | 2 days | Two days for BNM-regulated insurers and takaful operators: the Risk-Based Capital Framework, market conduct, takaful's fund separation rules, and PIDM protection. |
| Trade Sanctions & Export Control (Strategic Trade Act 2010) | 1 day | One day on the Strategic Trade Act 2010: controlled and dual-use goods, MITI permits, end-user screening and record-keeping for exporters and brokers. |
| Competition Act 2010 & MyCC Compliance | 1 day | One day on the Competition Act 2010: anti-competitive agreements, abuse of dominance, MyCC's investigation powers, leniency, and red flags in commercial conversations. |
| E-Commerce Consumer Protection (CPA & Electronic Trade Transactions) | 1 day | One day on online seller and marketplace obligations under the Consumer Protection Act and the Electronic Trade Transactions Regulations 2012. |
| Franchise Act Compliance (Registration & Disclosure) | 1 day | One day on the Franchise Act: registration before operating, the mandatory disclosure document, required agreement terms, and renewal and termination rules. |
| Housing Development Act Compliance (Licensed Developers) | 1 day | One day for licensed housing developers: HDA licensing, the Schedule G/H sale and purchase agreement, the Housing Development Account, and LAD exposure. |
| Internal Audit Fundamentals (Planning Through Follow-Up) | 2 days | Two days of practitioner internal audit methodology: risk-based planning, fieldwork, control testing, findings that get fixed, reporting and follow-up. |
| SC Product Governance Guidelines (Target Market & Review) | 1 day | One day on SC's Guidelines on Product Governance, in force since 2 January 2026: target market identification, approval sign-off and ongoing review. |
| Commercial Contract Drafting & Negotiation (Clauses, SLAs, Redline Workshop) | 1 day | One day on drafting and negotiating commercial contracts: the clauses that matter, vendor agreements and SLAs, and a hands-on redline workshop. |
| Strata Management Act 2013 (JMB, MC and Committee Duties) | 1 day | One day on the Strata Management Act 2013: JMB and MC formation, committee duties, sinking fund management and strata dispute resolution. |
| Non-HDA Property Development & Land Law Compliance | 1 day | One day on property development outside the Housing Development Act: land law fundamentals, planning approvals and non-HDA sale and purchase agreements. |
| Insurance Industry PDPA & Personal Injury Claims | 1 day | One day on PDPA obligations specific to insurers and the personal injury claims process: sensitive data, third-party data sharing and claims documentation. |
| ISO 37001 Lead Implementer & Auditor (Building and Auditing an ABMS) | 2 days | Two days taking ISO 37001 from awareness to practice: building an anti-bribery management system and auditing one against the standard. |
| Corruption Risk Management Standard (MS 2764) | 1 day | One day on MS 2764, the Malaysian standard on corruption risk management, and how it sits alongside ISO 37001 in an existing risk framework. |
| BNM MCIPD: Customer Information & Permitted Disclosures | 1 day | One day on BNM's Policy Document on Management of Customer Information and Permitted Disclosures, and how it works alongside PDPA for banks. |
| AI & PDPA: Malaysia's Emerging Regulatory Direction | 1 day | One day on where Malaysia's AI and personal data regulation is heading, built around JPDP's 2026 public consultation, and readiness steps you can take now. |
| Anti-Money Laundering for Capital Market Intermediaries (SC Guidelines) | 2 days | Two days for compliance officers at brokers, fund managers and other capital market intermediaries on the SC AML/CFT/CPF and TFS guidelines revised 13 June 2024. |
| Conduct for Capital Market Intermediaries and Vulnerable Clients (SC Guidelines) | 1 day | One day on the SC Guidelines on Conduct for Capital Market Intermediaries in force since 1 October 2024: client-first culture, fair dealing, vulnerable clients and online advice. |
| Capital Market Compliance Essentials for Asset Management | 1 day | One day on the Securities Commission obligations every asset management professional must meet: AML/CFT, conflicts of interest, inside information, PDPA and Section 17A. |
| Technology Risk Management for Capital Market Entities (SC Guidelines) | 1 day | One day for boards and senior management on the SC Guidelines on Technology Risk Management, revised 19 August 2024: accountability, cyber risk, near-miss reporting and testing. |
| Crowdfunding & Digital Asset Platform Compliance (SC Recognized Market Operators) | 2 days | Two days on running an SC-registered ECF, P2P financing, property crowdfunding, secondary trading or token offering platform under the Guidelines on Recognized Markets. |
| Investment Advertising & Finfluencer Compliance (SC Guidelines) | 1 day | One day on the SC's revised Guidelines on Advertising in force since 1 November 2025, covering finfluencers, marketing agents, social media campaigns and unlicensed promotion. |
| Digital Assets & Tokenisation Regulation in Malaysia | 1 day | One day on how Malaysia regulates digital assets and tokenised securities, including the May 2026 exchange rule changes, digital asset broking and the BNM tokenisation roadmap. |
| Anti-Money Laundering for Crowdfunding & Digital Asset Platforms (AML/CFT/CPF) | 2 days | Two days of AML/CFT/CPF specific to ECF, P2P, property crowdfunding and digital asset platforms: remote onboarding, issuer due diligence, trading red flags, wallet screening and the Travel Rule. |
| Governance & Investor Relations for Crowdfunded Companies (ECF) | 1 day | One day for founders and directors of ECF-funded companies, P2P borrowers and property crowdfunding issuers on running a company with hundreds of investors: disclosure, investor updates, secondary trading and exits. |
| Stablecoin & Digital Asset Compliance: KYC, KYB, On-Chain Monitoring and Wallet Security | 2 days | Two days on the identity verification, on-chain monitoring, wallet security governance, fraud risk scoring and case management that sit alongside AML/CFT and Travel Rule duties for stablecoin and digital asset payment platforms. |
| Capital Market Masterplan 2026 to 2030 Briefing (SC) | 1 day | One day for boards, strategy and compliance teams at capital market firms on the SC Capital Market Masterplan 2026 to 2030 and what it means for their business. |
| Listing Requirements Update: SC Equity Guidelines 2026 Revision | 1 day | One day on the SC Equity Guidelines revised 28 May 2026 and effective 3 June 2026: new MAIN Market profit tests, audit quality, ACE transfers and look-back periods. |
| ACE to MAIN Market Transfer Readiness Workshop | 1 day | A one-day workshop for ACE Market companies planning a move to MAIN under the 2026 rules: eligibility tests, disqualifiers and a 24-month readiness plan. |
| LEAP Market Governance, Disclosure and the LEAP 2.0 Proposals | 1 day | One day for LEAP Market companies and candidates on continuing obligations, disclosure and investor relations, and what the May 2026 LEAP 2.0 proposals would change. |
| BNM RMiT Compliance (Risk Management in Technology) | 1 day | Understand Bank Negara Malaysia's RMiT policy and what technology risk compliance demands at banks, insurers and takaful operators. |
| Cyber Security Code of Practice for Banking and Finance NCII Entities (RMiT Appendix 12) | 2 days | Two days on the Cyber Security Act code of practice for BNM-designated NCII entities, added to RMiT as Appendix 12 on 25 September 2026. |
| BNM Technology Requirements for Payment Services Regulatees | 2 days | Two days for e-money issuers, merchant acquirers, money services businesses and payment system operators on BNM's Technology Requirements, in force from 12 March 2027. |
| BNM Interoperable Fund Transfer Framework (DuitNow, QR and RPP) | 1 day | One day on BNM's Interoperable Fund Transfer Framework, effective 30 June 2026: shared infrastructure, interoperable QR, free transfers, consumer protection and the 2028 QR deadline. |
| Operational Resilience for Financial Institutions (BNM) | 2 days | Two days on operational resilience for banks and insurers: BNM's December 2025 discussion paper, impact tolerances, dependency mapping, scenario testing and Responsibility Mapping. |
| AI Governance for Financial Institutions (AICB Framework) | 2 days | Two days on governing AI in banks and financial institutions using the AICB CRO Forum framework's seven principles, alongside the JPDP ADMP guideline. |
| Governance and Performance Measurement for Development Financial Institutions (BNM) | 2 days | Two days for prescribed DFIs on BNM's June 2026 policy documents: corporate governance, the corporate strategic plan and the Performance Measurement Framework due by 1 July 2027. |
| E-Invoicing (LHDN MyInvois) Staff Readiness & Workflow | 1 day | Get finance and billing staff operating LHDN MyInvois confidently: required fields, validation, rejections, cancellations and your own internal SOP. |
| SST (Sales & Service Tax) Compliance | 1 day | Registration, taxable scope, exemptions, invoicing and the SST-02 return, plus how SST and MyInvois now interact. |
| Global Minimum Tax and Domestic Top-up Tax (Pillar Two) | 2 days | Two days on Malaysia's global minimum tax for large groups: scope, the 15% effective tax rate, MTT and DTT computations, safe harbours and the first returns. |
| Data Protection & Compliance | ||
| DPO Foundation | 1 day | Everything a newly appointed Data Protection Officer needs to implement and manage PDPA compliance across the organisation. |
| DPO Advanced | 2 days | Advanced DPO training mapped to the JPDP competency guideline, for practitioners already running a data protection function. |
| Data Controller Registration & Renewal (JPDP Circular 1/2026) | 1 day | One day on who must register as a data controller, how to register and renew through SPDP, and what Circular 1/2026 changed from 1 June 2026. |
| PDPA Obligations for Data Processors, Vendors & Outsourced Providers | 1 day | One day for SaaS vendors, BPOs, payroll, recruitment, marketing and IT service providers on the duties the 2024 PDPA amendments now place directly on data processors. |
| Data Protection Impact Assessment (DPIA) under the JPDP Guideline | 2 days | Two days on running a DPIA to the JPDP guideline released 30 April 2026: screening thresholds, the five-step method, residual risk and sign-off. |
| Data Protection by Design and by Default (DPbD) | 2 days | Two days on turning the JPDP Data Protection by Design guideline into design gates, default settings, vendor terms and evidence across the data lifecycle. |
| Automated Decision-Making and Profiling (ADMP) under the PDPA | 2 days | Two days on the JPDP ADMP guideline for teams using scoring, profiling and AI to make decisions about people: scope, consent, notice, fairness and oversight. |
| Online Safety Act Compliance for Digital Platforms (Act 866) | 2 days | Two days on the Online Safety Act 2025, in force since 1 January 2026: scope, harmful content duties, child safety, response timelines and the Online Safety Plan. |
| PDPA Codes of Practice for Regulated Sectors (Section 23) | 1 day | One day on the registered PDPA codes of practice for banking, insurance and takaful, communications, electricity, water, aviation and private hospitals. |
| PDPA Code of Practice for Banking and Financial Institutions | 1 day | One day on the ABM PDPA Code of Practice that binds banks and financial institutions licensed under FSA, IFSA and DFIA, applied alongside the amended Act. |
| PDPA Code of Practice for Private Hospitals (Healthcare) | 1 day | One day on the APHM PDPA Code of Practice for private hospitals: patient consent, medical specialists, next of kin, disclosures and retention periods. |
| Cross-Border Personal Data Transfer (JPDP CBPDT Guideline) | 2 days | Two days on section 129 and the JPDP cross-border transfer guideline: transfer conditions, Transfer Impact Assessments, BCRs, contractual clauses and certification. |
| Data Subject Rights and Data Portability Request Handling | 1 day | One day for the teams who receive PDPA requests: access, correction, withdrawal of consent, direct marketing opt-outs and the data portability right in force since 1 June 2025. |
| Biometric and Sensitive Personal Data under the Amended PDPA | 1 day | One day on biometric data, sensitive personal data since 1 April 2025: face, fingerprint and voice systems, explicit consent, proportionality, retention and security. |
| Personal Data Protection Standard: Security, Retention and Integrity | 1 day | One day on the Personal Data Protection Standard 2015 that sets minimum security, retention and integrity controls, and the revision JPDP proposed in 2025. |
| HIPAA Awareness | 1 day | HIPAA essentials for Malaysian hospitals, clinics and health-tech companies working with US patient data or US healthcare partners. |
| International Data Protection Laws | ||
| Singapore PDPA (PDPC Compliance) | 1 day | Comply with Singapore's PDPA when your business handles Singaporean personal data through a branch, cross-border sales or outsourcing. |
| China PIPL (Personal Information Protection Law) | 1 day | Understand China's PIPL obligations for Malaysian exporters, e-commerce sellers and hospitality businesses handling Chinese personal information. |
| US Privacy Laws (CCPA / CPRA) | 1 day | Meet CCPA and CPRA requirements when selling to US consumers through e-commerce, SaaS platforms or digital advertising. |
| ESG & Sustainability | ||
| ESG Adoption Training | 1 day | Take your team through the full ESG journey in one day: awareness, assessment, implementation and reporting. |
| ESG Fundamentals | 1 day | A plain-language introduction to ESG: what it actually means, which frameworks matter, and why your customers keep asking about it. |
| ESG Intermediate | 2 days | Move from understanding ESG to implementing it, working through materiality assessment, data collection, KPI design and reporting. |
| Sustainability Reporting (GRI & Bursa) | 2 days | Learn how to produce a credible sustainability report step by step, under both GRI Standards and Bursa Malaysia requirements. |
| GHG & Carbon Accounting (ISO 14064) | 2 days | Build a greenhouse gas inventory to ISO 14064, taught by a certified Lead Verifier who audits these inventories for a living. |
| GHG & Carbon Accounting Fundamentals | 1 day | Been asked for your carbon number? Calculate your own Scope 1 and Scope 2 emissions in a hands-on working session. |
| Sustainability Disclosure Standards (IFRS S1 & S2) | 2 days | Implement IFRS S1 and S2 for Bursa-listed companies under the NSRF, and work out what has to be disclosed first. |
| Scope 3 Supplier Data Collection | 2 days | Scope 3 is a data problem, not a maths problem. Learn how to get emissions data out of hundreds of suppliers. |
| EU Carbon Border Tax Readiness & Embedded Emissions Reporting (CBAM) | 1 day | Exporting to Europe? Learn how to calculate embedded emissions, answer your importer's CBAM data request and price the cost impact. |
| National Sustainability Reporting Framework (NSRF) Compliance | 1 day | Find out exactly where your company sits on the NSRF timeline, what you must report this year, and which reliefs you can use. |
| Sustainability Assurance Readiness | 1 day | Prepare for sustainability assurance before the auditors arrive: evidence files, management assertions, estimates and the controls they will test. |
| ESG Data Management, Controls & Audit Trail | 1 day | Learn how to collect ESG data reliably and prove where every published number came from, using finance-grade controls. |
| Climate Risk & Scenario Analysis (IFRS S2) | 1 day | Learn how to identify climate risks, run scenario analysis and disclose financial effects, the hardest requirement in IFRS S2. |
| Sustainability & Climate Risk Certification (GARP SCR) | 2 days | Two-day exam preparation for GARP's Sustainability and Climate Risk certificate, the individual credential that sits alongside this catalogue's organisation-level ESG courses. |
| Bursa Sustainability Reporting Platform Clinic | 1 day | Hands-on clinic for the staff who file: navigate Bursa's CSI platform, interpret each data point and submit without validation errors. |
| Board & C-Suite Sustainability Governance | 1 day | One-day briefing for directors on sustainability oversight duties, committee structures, and the questions to ask before signing off a report. |
| Product Carbon Footprinting & Life Cycle Assessment Fundamentals | 1 day | Learn how to calculate the carbon footprint of a single product using ISO 14067 and life cycle assessment method. |
| Carbon Credit Project Readiness & Verification | 1 day | Thinking of generating carbon credits? Learn what additionality, baselines, monitoring and third-party verification really require before you invest. |
| Sustainable Procurement & Supplier ESG Management | 1 day | Build a supplier ESG programme that is proportionate: risk-based segmentation, codes of conduct, contract clauses and audits that find real issues. |
| Climate Disclosure Transition Workshop (TCFD to IFRS S2) | 1 day | Already reporting under TCFD? Map what carries over to IFRS S2, find the genuine gaps and prioritise the remaining work. |
| ISO 14001 Environmental Management System Awareness | 1 day | Environmental aspects, impacts and compliance obligations. The operational backbone under an ESG report that would otherwise be assertion. |
| Microsoft | ||
| MS Excel Essential for Professionals | 1 day | Learn to manage, analyse and present data confidently in Excel, from beginner up to solid intermediate level. |
| MS Excel Essential for Professionals - Advanced | 2 days | Master advanced Excel: complex formulas, data modelling, automation and professional reporting using real business datasets. |
| Power BI for Business: Fundamentals | 1 day | Start from zero in Power BI: connect your data, build your first reports and publish dashboards people actually use. |
| Power BI Training: Reports & Dashboards | 1 day | Build professional Power BI reports and dashboards using Power Query, proper data modelling and DAX. |
| Power BI Advanced Analytics | 2 days | For existing Power BI users: advanced DAX patterns, complex data models and enterprise-level deployment. |
| Microsoft 365 Productivity & Copilot | 1 day | Stop paying for Microsoft 365 features nobody uses. Learn Teams, SharePoint, automation and Copilot, including safe data handling. |
| Word Essentials | 1 day | Styles, templates, track changes and mail merge for the contracts, reports and letters your team writes every week. HRD Corp claimable. |
| Power Apps Fundamentals | 1 day | Build a working approval or request-tracking app without writing conventional code, and learn the governance basics before you scale it. HRD Corp claimable. |
| OneNote for Teams | 1 day | Turn scattered personal notes into a shared notebook that works as the team's institutional memory. HRD Corp claimable. |
| Access Fundamentals | 1 day | Build tables, relationships, queries, forms and reports, and learn the honest signs that it is time to move past Access. HRD Corp claimable. |
| Visio Fundamentals | 1 day | Flowcharts, org charts and data-linked diagrams that a reader who was not in the room can still follow. HRD Corp claimable. |
| Microsoft 365 Fundamentals (MS-900) Exam Preparation | 1 day | One day of structured exam preparation for Microsoft's MS-900 Fundamentals certification: cloud concepts, Microsoft 365 services, security and compliance basics, licensing, and a timed practice exam. |
| Security, Compliance & Identity Fundamentals (SC-900) Exam Preparation | 1 day | One day of structured exam preparation for Microsoft's SC-900 Fundamentals certification: security, compliance and identity concepts, Microsoft Entra ID, Defender and Purview, and a timed practice exam. |
| Power BI Data Analyst Associate (PL-300) Exam Preparation | 2 days | Two days of structured PL-300 exam preparation: data preparation, modelling, DAX, visualisation, deployment and row-level security, with scenario practice and a timed mock exam. |
| Executive Dashboard Development with Excel and AI | 2 days | Day one builds the dashboard in Excel, day two rebuilds it with AI against the same dataset, and you score which one you would actually trust. |
| Manufacturing & Industry 4.0 | ||
| Lean & Six Sigma (Yellow / Green Belt) | 2 days | Learn the Lean and Six Sigma tools that cut waste, defects and cycle time, at Yellow and Green Belt level. |
| Predictive Maintenance & Condition Monitoring | 1 day | Cut unplanned downtime by moving maintenance from reactive schedules to condition monitoring and genuine failure prediction. |
| Industrial IoT (IIoT) & Sensor Data Basics | 1 day | Understand how industrial IoT is built, from sensors and edge processing through to the cloud, and what data it can give you. |
| Digital Twin & Smart-Factory Concepts | 1 day | An awareness-level introduction to digital twins and Industry 4.0, with a practical smart-factory roadmap for managers and decision-makers. |
| Robotics & Automation Awareness | 1 day | Shop-floor automation explained for supervisors, HR and operations: robot types, where they fit, and what changes for your workforce. |
| OT / ICS Security | 2 days | Secure the operational technology and industrial control systems that run your plant, as IT and OT networks continue to converge. |
| ISO 9001 Quality Management System Awareness | 1 day | The most widely held certificate in the world, and the one most often run as paperwork. Process approach, risk-based thinking and audit readiness. |
| Data & AI | ||
| Python for Data (pandas & Visualization) | 2 days | The natural next step after Excel and Power BI. Learn Python and pandas to handle data no spreadsheet can cope with. |
| Data-Science & ML Fundamentals | 1 day | Machine learning literacy for analysts: supervised and unsupervised learning, regression, classification, and how to judge whether a model is any good. |
| Data Engineering & Pipelines | 2 days | Understand how data actually moves from source system to warehouse to dashboard, and how to build pipelines that hold up. |
| MLOps & Model Deployment Basics | 1 day | Bridge the gap between building a model and running it in production: packaging, CI/CD, monitoring and drift detection. |
| SQL for Data Analysis | 2 days | Query the database directly instead of waiting for an extract. Joins, aggregation and window functions, on real data. |
| Tableau & Looker Studio Fundamentals | 1 day | The non-Microsoft option for teams not standardised on Power BI. Connecting data, building charts that read correctly, and publishing a dashboard. |
| Cloud & DevOps | ||
| Cloud Engineering Foundations (AWS / Azure) | 1 or 2 days | Hands-on work with compute, networking and storage on AWS and Azure, for teams moving past cloud theory into practice. |
| Cloud-Platform Foundations (AWS / Azure) | 1 day | Baseline cloud literacy for every role: service models, identity and access, storage, cost control and shared responsibility. |
| Containers & Kubernetes Basics | 2 days | Learn Docker fundamentals and Kubernetes architecture, one of the most in-demand deployment skills in the market right now. |
| CI/CD & DevOps Culture | 1 day | Design CI/CD pipelines and Git workflows, and build the automation culture and feedback loops that make faster releases safe. |
| Infrastructure-as-Code | 2 days | Replace hand-built, fragile environments with repeatable, auditable infrastructure using Terraform and Pulumi. |
| Git, Infrastructure as Code & Deployment Pipelines (CI/CD) with Vibe Coding | 2 days | Two days that join up version control, infrastructure configuration, AI-assisted coding and automated deployment as one workflow, ending in a pipeline the team has actually run. |
| DevSecOps & Cloud Security Hardening | 2 days | Build security into the pipeline itself: secure design, secrets management, policy-as-code and threat modelling for cloud teams. |
| Corporate, Project & Leadership | ||
| Scrum Master / Agile Fundamentals | 2 days | Learn Scrum roles, events, backlog refinement and estimation, and run a simulated sprint before you run a real one. |
| Project Management (PMP-aligned) | 1 or 2 days | Run projects from initiation to closeout using the PMI PMP framework: scope, risk, schedule, budget and stakeholder management. |
| Working-Manager & First-Line Supervisor | 1 day | For people promoted for technical skill who now manage a team. Learn coaching, feedback and the transition into leadership. |
| Train the Trainer (TTT Preparation) | 2 days | Turn your subject matter experts into trainers people actually learn from, and prepare them for HRD Corp TTT certification. |
| OKRs & Team Performance | 1 day | Replace activity-based KPIs with outcome-focused OKRs, and set the tracking cadence that keeps a team honest about progress. |
| Stakeholder & Vendor Management | 1 day | Learn stakeholder mapping and negotiation alongside vendor governance and SLA management, for project, procurement and operations leads. |
| Finance for Non-Finance Managers | 1 day | Read the three statements, build a budget you can defend, and argue a business case in the language the finance team actually uses. |
| Team Building Training (High-Performing Teams Essentials) | 1 day | A practical team building day that strengthens communication, collaboration, leadership and problem solving through interactive activities. |
| Business & Workplace Communication | 1 day | Write emails that get decisions, run meetings that end in action, and handle difficult conversations without making them worse. |
| Critical Thinking & Problem Solving | 1 day | Learn how to frame a problem properly, test the evidence and find the real root cause before committing time and money. |
| Managing Change & Digital Transformation | 1 day | Your new system went live and half the team still uses the old spreadsheet. Learn how to get change actually adopted. |
| Digital Transformation & AI Adoption Strategy | 1 day | Somewhere between unsanctioned ChatGPT accounts and a stalled proof of concept. How to pick use cases and build a real roadmap. |
| Consultative Sales & Business Development | 1 day | Win more B2B deals through better discovery, honest qualification, confident objection handling and negotiation that protects your margin. |
| IT Sales & Marketing Essentials | 1 day | For technical people who have been handed a sales target. Structure, discovery and objections, without asking anyone to become a different personality. |
| HR & People Practice | ||
| HR for Non-HR Managers | 1 day | Line managers make the decisions that create most of your legal exposure. This gives them enough to make those calls correctly. |
| Competency-Based Interviewing & Hiring | 1 day | Most bad hires are decided in the first four minutes and justified for the remaining fifty. This replaces that with a scored, structured interview. |
| Compensation & Benefits Essentials | 1 day | Salary structures, benchmarking, increments and bonus design, plus the statutory floor you cannot negotiate below. |
| Performance Management & KPI Setting | 1 day | The appraisal cycle that actually changes behaviour: goal setting, KPIs people can influence, calibration and the mid-year conversation. |
| Succession Planning & Talent Retention | 2 days | Identify the roles that would hurt to lose, build a bench for them, and find out why people actually leave before they do. |
| Industrial Relations, Termination & Dismissal | 2 days | Just cause and excuse, the Industrial Court, and what an unfair dismissal claim looks like from the other side of the table. |
| Domestic Inquiry & Misconduct Handling | 2 days | Running the inquiry properly: charges that are answerable, a panel that is impartial, and a record that survives the Industrial Court. |
| Training Needs Analysis (TNA) | 1 day | Work out which performance gaps training can actually close, and stop spending the levy on courses nobody needed. |
| EPF, SOCSO & EIS Employer Obligations | 1 day | Contribution rates, wage definitions, deadlines and claims. The statutory admin every employer owes and most get slightly wrong. |
| Leadership Skills for New Managers | 1 day | The promotion that changes the job entirely. For people who were good at the work and are now responsible for other people doing it. |
| People Management & Team Leadership | 2 days | For managers past the first year: building the team, handling conflict, motivating without budget, and managing performance properly. |
| Core Soft Skills | ||
| Presentation Skills & Public Speaking | 1 day | Structure, delivery and nerves. Everyone presents twice and gets filmed once, which is the part that actually changes anything. |
| Business Writing & Email Etiquette | 1 day | Write so people can act on it. Structure, tone, and the emails that cause meetings instead of preventing them. |
| Minutes of Meeting & Report Writing | 1 day | Minutes that record decisions rather than transcribe conversation, and reports someone will read past the first page. |
| Customer Service Excellence | 1 day | Service standards, handling the angry customer, recovery after a failure, and the phone and written channels most teams neglect. |
| Time Management & Productivity | 1 day | Prioritisation that survives contact with a real inbox, plus the meeting and interruption habits that quietly consume the week. |
| Stress Management & Emotional Intelligence | 1 day | Recognising your own stress response and other people's, and the self-regulation that keeps a hard week from becoming a bad decision. |
| Sales Skills & Closing Techniques | 2 days | The full cycle from prospecting to close, including the objection handling and negotiation most sales training skips. |
| Design Thinking for Business Innovation | 2 days | A structured way to solve problems nobody has defined properly yet. Two days running a real internal challenge through the full cycle. |
| SME Digital & Marketing | ||
| Social Commerce (TikTok / Shopee / Lazada) | 1 day | Set up and run stores on TikTok, Shopee and Lazada, with the content and live-selling mechanics that actually convert. |
| GA4 & Performance Analytics | 1 day | Find out which marketing actually works. Set up GA4, understand funnels, events and attribution, and read the numbers properly. |
| Paid Social & Search Ads | 1 day | Run search and social ad campaigns that do not waste budget: campaign structure, targeting, bidding and creative that performs. |
| Content & Brand Storytelling | 1 day | Build content capability in-house instead of outsourcing it: brand voice, the right formats, and story frameworks that hold attention. |
| SME Digital Readiness Bundle (with MyInvois) | 1 or 2 days | A capstone bundle combining social commerce, analytics, paid ads, content and MyInvois readiness into one SME digital plan. |
| Social Media Marketing & E-Commerce Selling | 2 days | For teams posting regularly with nothing to show for it. Pick the right platforms and connect your content to actual sales. |
| Live Selling & Short-Form Video | 1 or 2 days | Produce short-form video that earns attention, and run live selling sessions that hold an audience and convert them. |
| SEO Fundamentals for Business | 1 day | A plain-language introduction to SEO and AI search for business owners and marketers. Leave with a keyword list and an audit of your own site. |
| Retention & Direct Marketing (Email / WhatsApp) | 2 days | Keep the customers you already paid to acquire, using email and WhatsApp marketing built on PDPA-compliant consent. |
| AI for Marketing & Content Creation | 2 days | Get AI to produce on-brand marketing work instead of bland filler, using proper briefs, better prompts and editing discipline. |
| Google Ads & Search Engine Marketing | 2 days | Build, run and optimise paid search properly. Keywords, match types, Quality Score, bidding and the conversion tracking most accounts get wrong. |
| Meta Ads (Facebook & Instagram) | 2 days | Campaign structure, audiences, creative and the pixel. Includes what changed after the tracking restrictions, which broke a lot of old advice. |
| WhatsApp Business Marketing | 1 day | The channel most Malaysian customers actually reply on. Catalogue, broadcast, automation and the consent rules that keep you off a block list. |
| Content Marketing & Copywriting | 1 day | Writing that sells without sounding like it is selling. Strategy, headlines, landing pages and a calendar the team can sustain. |
| Design & Creative | ||
| UI/UX & Digital Product Design | 1 day | Learn to run user research, turn findings into user flows, build a clickable Figma prototype and hand off cleanly to developers. |
| Graphic Design for Business (Canva / Adobe) | 1 day | For the person who ends up making the poster. Learn the design rules that separate amateur from professional, and build a brand kit. |
| Figma for Product Teams | 2 days | The tool the whole product team now works in. Components, auto layout, prototyping and handover, for designers and non-designers alike. |
| UX Fundamentals | 1 day | The research, structure and testing behind an interface that works, for teams that have been designing on opinion. |
| UX for Leaders | 1 day | For the people who fund design work: what to ask for, how to judge it, and how to tell design maturity from a redesign every eighteen months. |
| Energy | ||
| ISO 50001 Energy Management | 1 day | Set up an ISO 50001 energy management system: energy policy, planning, performance indicators and internal auditing. |
| Renewable-Energy / Solar Basics | 1 day | Solar PV fundamentals for facilities and operations teams, covering grid interaction, storage and Malaysia's renewable energy policy landscape. |
| Carbon Markets & Trading | 1 day | Understand how carbon becomes a tradable asset: offsets versus allowances, how the markets work, and what it means for your business. |
| Energy Audit Fundamentals | 1 day | Learn a repeatable energy audit method: collect meter data, find the savings, and calculate them credibly enough to get funded. |
| GHG Accounting Extension (deepens ISO 14064) | 1 day | A deeper technical follow-on to ISO 14064: Scope 1, 2 and 3 in detail, emission factors, and preparing for third-party verification. |
| Workplace Wellbeing & Safety | ||
| OSH, HIRARC & Workplace Safety Awareness | 1 day | Meet your OSHA duties after the 2022 amendment, and learn HIRARC properly: identify hazards, assess risk and choose controls that work. |
| Workplace Mental Health & Psychological Safety | 1 day | Equip managers to notice when someone is struggling, hold the conversation well, and know exactly where their role stops. |
| Burnout Prevention & Resilience at Work | 1 day | Treat burnout as a job design problem rather than a personal weakness, and fix the workload, recovery and manager behaviours behind it. |
| Sleep, Recovery & Workplace Performance | 1 day | Understand how sleep loss quietly degrades judgement, safety and output, and what roster design and recovery habits can fix. |
| ISO 45001 Occupational Health & Safety Management Awareness | 1 day | The management system above HIRARC. Worker participation, hazard elimination and the OSHA 2022 duties the standard now has to sit on top of. |
| Latihan Bahasa Malaysia | ||
| Kesedaran PDPA: Pematuhan Praktikal | 1 hari | Versi Bahasa Malaysia. Akta Perlindungan Data Peribadi 2010, pindaan 2024, notifikasi pelanggaran data, dan tiga garis panduan JPDP 2026 (DPIA, DPbD, ADMP). |
| Kesedaran Integriti & Antirasuah | 1 atau 2 hari | Versi Bahasa Malaysia. Bentuk rasuah, Akta SPRM dan liabiliti korporat Seksyen 17A, saluran pemberi maklumat, dan prosedur mencukupi. |
| Akta Kerja 1955, Siasatan Dalaman & Penamatan | 1 hari | Versi Bahasa Malaysia. Akta Kerja 1955 selepas pindaan 2022, surat tunjuk sebab, siasatan dalaman, gangguan seksual, penamatan dan pemecatan konstruktif. |
| Kesediaan E-Invois (MyInvois LHDN) | 1 hari | Versi Bahasa Malaysia. Latihan proses dan dokumentasi e-Invois untuk kakitangan kewangan, bil, jualan dan perolehan. Bukan kursus pelaksanaan perisian. |
| Pengurus Bekerja & Penyelia Barisan Hadapan | 1 hari | Versi Bahasa Malaysia. Peralihan daripada pekerja mahir kepada pemimpin: pembimbingan, maklum balas, pengurusan prestasi dan pengendalian konflik pasukan. |
| Asas Pasukan Berprestasi Tinggi | 1 hari | Versi Bahasa Malaysia. Komunikasi, kolaborasi, kepercayaan, kepimpinan dan penyelesaian masalah melalui simulasi berpasukan. |
| Komunikasi Perniagaan & Tempat Kerja | 1 hari | Versi Bahasa Malaysia. Bengkel menulis dan bertutur: e-mel yang mendapat keputusan, mesyuarat yang menghasilkan tindakan, dan perbualan sukar. |
| Unit Integriti & Tadbir Urus (Korporat & GLC) | 2 hari | Versi Bahasa Malaysia. Membina dan menjalankan Unit Integriti dan Tadbir Urus (UITU): peranan Pegawai Integriti Ketua, bidang tugas, fungsi teras dan penyeliaan lembaga pengarah. |
| Integriti dan Tadbir Urus dalam Perkhidmatan Awam | 2 hari | Versi Bahasa Malaysia. Asas perundangan, enam fungsi teras, pentauliahan CeIO dan pelaporan kepada SPRM untuk Unit Integriti dan Tadbir Urus agensi awam. |
| AI Tools & Agents | ||
| Agentic AI for Business | 1 day | An agent is not a chatbot. Learn what agentic AI actually does, where it already shows up at work, and how to use it without losing control of it. |
| ChatGPT for Business | 1 day | Custom GPTs, Projects, data analysis and admin controls, taught as a daily workflow rather than a feature tour. HRD Corp claimable. |
| Claude for Business | 1 day | Projects, Artifacts and long-document analysis, taught through real contracts and reports rather than a feature tour. HRD Corp claimable. |
| Perplexity for Research | 1 day | Cited answers are a starting point, not proof. Learn Focus modes, Spaces, Pro Search and how to verify what Perplexity tells you. HRD Corp claimable. |
| NotebookLM for Teams | 1 day | Build notebooks that only answer from your own documents, plus audio overviews your team can listen to instead of read. HRD Corp claimable. |
| Google Workspace | ||
| Google Workspace Essentials | 1 day | Drive sharing, Docs collaboration, Gmail, Calendar and Meet, taught as one consistent daily workflow. HRD Corp claimable. |
| Google Sheets | 1 day | Formulas, pivot tables, data validation and Apps Script basics, plus a practical framework for choosing Sheets or Excel. HRD Corp claimable. |
Courses marked 1 or 2 days can be delivered in either format. All programmes are available in-house for closed groups of 2-60 participants, or as public-run sessions. Contact us for a quotation and minimum group size.