Company: ARBB
Filing Date: 2025-10-31
Form Type: 20-F
Source: 0001213900-25-104705
Chunk: 56

Company: ARB IOT Group Ltd
Filing Date: 2025-10-31
Form: 20-F
Item: Item 4
Chunk 56
---
manned Aircraft
System (UAS) or more familiarly known as Drone flight activities are currently bound to regulations 140 -144 of the Civil Aviation Regulation
2016, or the CAR whereby an authorization from the Director General is required for circumstances specified in the CAR.

Regulations on
IoT Gadget Distribution

Guidelines on Foreign
Participation in Distribution Trade Services in Malaysia by Ministry of Domestic Trade and Consumer Affairs of Malaysia, or the MDTCA

Any foreign involvement
in various other distribution formats are required to be in compliance with the following conditions:

  (a)      must                                                                                                                                        

  (b)      The                                                                                                                   

  (c)      An                                                                                                        

Failure to comply with
any provisions under these Guidelines by the business operators and for the purpose of national security, the Distributive Trade Committee
of MDTCA has the right to reject the application to open a new business branch and to revoke any previous approval given by the Distributive
Trade Committee of MDTCA

Regulations on
Cybersecurity

Cyber Security Act
2024

The Cyber Security Act
2024 (the “ CSA 2024”) came into force on August 26, 2024 to strengthen Malaysia’s legal framework by focusing on the
designation of the National Critical Information Infrastructure (“ NCII”) sectors, regulating cybersecurity service providers,
and establishing comprehensive procedures for managing cybersecurity incidents. The CSA 2024 emphasizes proactive measures to safeguard
critical sectors against cyber threats and mandates compliance from organizations to prevent malicious activities, report cybersecurity
incidents, and engage only licensed cybersecurity service providers. The CSA 2024 introduces the concept of NCII, defined as “ a
computer or computer system which, if disrupted or destroyed, would have a detrimental impact on the delivery of any service essential
to the security, defense, foreign relations, economy, public health, public safety, or public order of Malaysia, or on the ability of
the Federal Government or any of the State Governments to carry out their functions effectively.”The NCII sectors are
as follows: (a) the government: (b) banking and finance; (c) transportation, defense, and national security; (d) information, communication,
and digital; (e) healthcare services; (f) water, sewerage, and waste management; (g) energy; (h) agriculture and plantation; (i) trade,
industry, and economy; and (j) science, technology, and innovation (collectively, the “ NCII