35% to 95%: How a Malaysian Fintech Platform Achieved Regulatory Compliance on AWS in Five Weeks

Mesinkira Sdn Bhd is a Malaysian retail operations platform built to help micro, small, and medium-sized enterprises (MSMEs) manage their businesses and access financial services. As it deepened its partnerships with banks, insurance companies, and lending providers, Mesinkira faced a new challenge: meeting the strict regulatory standards set by Bank Negara Malaysia's Risk Management in Technology (RMiT) framework.

Partnering with Galactic Network, Mesinkira established an enterprise-grade cloud foundation on AWS, comprising nine purpose-built AWS accounts under AWS Control Tower and engaged 24x7 Cloud Management & Optimization Service (CMOS) for ongoing management. Within five weeks, Mesinkira passed a formal regulatory audit and is now positioned to scale with confidence.

Mesinkira is a Malaysian retail operations platform built to support MSMEs in managing their businesses and accessing financial services. At its core, Mesinkira bridges the gap between everyday business owners and the financial tools they need to grow.

As the platform expanded its partnerships with banks, insurers, and lending providers, Mesinkira's role evolved into that of a trusted intermediary in the Malaysian financial ecosystem, bringing with it the compliance expectations that come with that responsibility.

As Mesinkira integrated more deeply with financial institutions, the stakes around data security, system reliability, and regulatory compliance became much higher. Bank Negara Malaysia's RMiT framework set a clear bar that Mesinkira needed to meet — and to do so, their cloud environment needed to be purposefully reshaped for security, governance, and scale.

To continue growing their financial institution partnerships responsibly, Mesinkira needed to demonstrate to regulators and partners that their cloud environment met the required standards. With a security score of 35% and a compliance audit on the horizon, the company knew it was time to take a structured approach to cloud governance and to find the right partner to help them get there quickly.

Galactic Network began with a thorough assessment of Mesinkira's existing cloud environment to identify gaps and define a clear path to compliance. A new cloud foundation was established using AWS Control Tower, organizing Mesinkira's environment across nine purpose-built AWS accounts with consistent security policies, IAM controls, and network segmentation — giving Mesinkira the structure and governance required to operate responsibly within the financial services ecosystem.

Following the foundation build, Galactic Network deployed 24x7 CMOS across all accounts, covering security monitoring, financial governance, and continuous optimization. Server access was secured and audited through AWS Systems Manager Session Manager with 90-day log retention, while AWS Health event notifications provided proactive infrastructure visibility across all nine accounts. Budget alerts and AWS Cost Anomaly Detection were configured for financial governance, and AWS Compute Optimizer together with AWS Cost Optimization Hub were activated to drive ongoing rightsizing recommendations as the business scales.

CMOS also demonstrated its value through rapid, security-first incident response. When a database read replica experienced a CPU spike from heavy reporting queries, the CMOS team detected the alarm, triaged in real time, and restored operations within 30 minutes, while initiating a longer-term analysis to prevent recurrence. In a separate incident, a production server CPU spike was immediately investigated with security checks, giving Mesinkira's team confidence that every anomaly is thoroughly assessed, not just acknowledged.

Beyond incident response, the CMOS team proactively identified a series of improvement areas during onboarding, spanning instance lifecycle management, tagging standardization, cost optimization, and security controls — and worked with Mesinkira's leadership to prioritize these for ongoing action.

In just five weeks, Mesinkira's cloud environment was transformed and passed a formal external audit with confidence.

The cloud security score jumped from 35% to 95%, reflecting how fundamentally the environment was redesigned. Mesinkira successfully passed the stringent compliance audit by a leading regional bank that was heavily based on Bank Negara RMiT, unlocking its ability to continue growing its financial institution partnerships responsibly.

With nine purpose-built AWS accounts under a governed cloud foundation, and CMOS providing ongoing management, Mesinkira now operates with the infrastructure rigour expected of a financial services intermediary. The organization's team can focus on growing the business, knowing their cloud environment is actively monitored, continuously improved, and maintained to the standards their partners and regulators expect.

With a compliant and well-governed cloud foundation established, Mesinkira is now positioned to onboard new financial institution partnerships and expand its platform with confidence. With AWS and Galactic Network as trusted partners, Mesinkira is building a future-ready foundation that supports its mission of making financial services more accessible for small businesses across Malaysia.