Aina Rahman
Lead auditor, command paths
Aina spent a decade in plant electrical teams in Selangor before moving to independent review. She leads on-site command-path work and still prefers a live write test with operations in the room.
Practice
A small audit studio, not a product floor.
Data Endpoint Grid is based at A 197 Jalan Segambut in Kuala Lumpur. We review IoT control applications for plants, warehouses, and facilities that already run — or are about to run — software that can change a physical state.
Why the work looks like this
Control applications are sold as dashboards and delivered as command paths. Our job is to say, in writing, what the running software can do to the process, who is allowed to ask it, and how that request is recorded.
We are not a system integrator and we do not sell licences. If a finding points at a vendor product, we still write it. If the site’s own workaround is the risk, we write that too. Engagements are scoped so operations can authorise a supervised test; we do not probe a live line in secret.
Where we work
Desk review happens in Segambut. Fieldwork is typically in the Klang Valley, with travel further in Peninsular Malaysia when the application and the process justify it. A remote document pass is possible for the identity and change-control audits; command-path and operator-interface work needs the room where people press the buttons.
Telephone +60 3-62586210. Post and visits: A 197 Jln Segambut, Kuala Lumpur, Wilayah Persekutuan 51200, Malaysia. Hours Monday to Friday, 9:00–17:30 MYT.
People you may meet
Auditors
Daniel Khoo
Embedded software reviewer
Daniel reads gateway images, rule engines, and the glue that vendors call “edge logic”. He previously wrote firmware for building-management controllers.
Mei Ling Tan
Identity and records
Mei Ling maps who can issue a control action and how that action is kept. She handles privilege matrices and the PDPA questions that appear once logs contain names.