Data Centre Week: 6 November 2026 — What Operators Need to Know
This week in APAC data centres
- Singapore’s new US$200 million data centre insurance facility covers construction, cyber and supply-chain risks, expanding underwriting beyond traditional models (eNOVA Weekly, 6 November).
- Google’s US$15 billion Malaysian investment across 2027-2028 will test Johor’s 8,542MW pipeline capacity against current 0.7% colocation vacancy (eNOVA Weekly, 6 November).
- Supermicro disclosed eight BMC firmware flaws across 392 SKUs, including a CVSS 9.8 zero-credential vulnerability that runZero identified (eNOVA Weekly, 6 November).
- Malaysia’s contracted data centre power demand stands at 2,346MW whilst actual August usage reached only 1,374MW (58.5%), with operators now paying market rates for full contracted capacity (eNOVA Weekly, 6 November).
Southeast Asia’s data centre market is entering a phase of simultaneous growth, risk mitigation and operational discipline, as major cloud investors commit billions whilst regulators and insurers tighten guardrails around capacity, cybersecurity and cost accountability. This week’s developments across Singapore’s new insurance facility, Malaysia’s absorptive capacity, supply chain vulnerabilities and power procurement reform signal that scale must now be matched by resilience, compliance and transparency across the region.
What does a US$200m data centre insurance facility in Singapore mean for operators?
Insurance Business Asia
MSIG, Gallagher Re, SCOR, Samsung Re and others plan a Singapore facility with US$200 million of initial capacity for construction, operational, supply-chain, design and cyber risks, Minister Chee Hong Tat said on 2 November.
What this means for your operations: Expect underwriters to ask how you run your site. Check you can pull power event logs, access records and remote recovery procedures today.
Can Malaysia absorb Google’s US$15bn data centre plan?
Capacity
Google will invest US$15 billion in Malaysia across 2027 and 2028, while Knight Frank puts Johor’s pipeline at 8,542MW against colocation vacancy of 0.7%.
What this means for your operations: Johor has little spare room and Singapore sits at 4.9%. Planning a 2027 expansion? Rack-level power data shows the stranded capacity you already own.
Is your Supermicro BMC exposed to the eight new IPMI and KVM flaws?
SecurityOnline
Supermicro disclosed eight BMC firmware flaws across 392 SKUs, including CVE-2026-18450, a CVSS 9.8 issue needing no credentials; runZero found them and Supermicro knows of no malicious use.
What this means for your operations: Two SKUs still show a fixed version of TBD. List your boards, patch, and keep BMC interfaces on a separate management network behind a hardened out-of-band path.
What does NTT’s 12MW Jakarta annex add for Indonesian deployments?
Developing Telecoms
NTT opened JKT2A, a Tier III site with 12MW of IT capacity, and launched APN Connect, a Layer 1 link to its JKT3 site about 35km away.
What this means for your operations: Linked Jakarta sites suit dual-site designs, and Knight Frank puts Jakarta vacancy at 20.5%. A second site with few local staff needs remote KVM and out-of-band access from day one.
Why will Malaysian data centres pay for power they do not use?
W.Media
Minister Johari Abdul Ghani said TNB-supplied data centres will pay market rates for full contracted capacity, even when usage is lower; August usage was 1,374MW against 2,346MW contracted, or 58.5%.
What this means for your operations: Over-contracted power becomes a direct cost. Measure real draw at rack or outlet level before your next contract, not nameplate ratings.
As data centre operators navigate tighter insurance requirements, expanded deployments and stricter power accountability, integrated management of power distribution, remote access, out-of-band recovery and capacity planning becomes essential. Contact eNOVA Technologies to discuss how Raritan PDUs, Adder and G&D KVM solutions, ZPE out-of-band management, and Sunbird DCIM integration can future-proof your infrastructure against this week’s emerging compliance and operational demands. eNOVA supplies the power, KVM, out-of-band and DCIM layer behind these builds, from Raritan intelligent PDUs and Sunbird DCIM to Adder and G&D KVM and ZPE out-of-band management. Talk to our team about your next deployment.
Frequently Asked Questions
What is the new Singapore data centre insurance facility and who backs it?
On 2 November, Singapore’s Minister Chee Hong Tat announced a US$200 million insurance facility underwritten by MSIG, Gallagher Re, SCOR, Samsung Re and other carriers to cover construction, operational, supply-chain, design and cyber risks specific to data centre operators. This facility expands underwriting capacity beyond traditional property and liability products to address emerging vulnerabilities in the regional sector.
Can Malaysia’s data centre infrastructure support Google’s US$15 billion investment?
Google plans to invest US$15 billion across Malaysia in 2027 and 2028, whilst Knight Frank reports Johor’s data centre pipeline at 8,542MW with colocation vacancy at just 0.7%. Although pipeline capacity appears adequate, the extremely tight vacancy rate suggests significant demand-supply tension and potential accelerated construction timelines will be necessary to meet Google’s deployment schedule.
What is the Supermicro BMC vulnerability and should I patch immediately?
Supermicro disclosed eight BMC firmware vulnerabilities across 392 server SKUs, including CVE-2026-18450 rated CVSS 9.8, which requires no user credentials to exploit. RunZero identified the flaws and Supermicro has confirmed no known malicious exploitation to date, but patches should be prioritised given the severity rating and the critical role baseboard management controllers play in out-of-band access.
How does Malaysia’s data centre power pricing model work after the TNB reform?
From the TNB reform announced by Minister Johari Abdul Ghani, data centre operators will pay market rates for their full contracted power capacity regardless of actual usage levels. In August 2026, operators contracted 2,346MW but used only 1,374MW (58.5% utilisation), meaning they paid for the unused 972MW; this reform incentivises accurate capacity forecasting and may reduce speculative infrastructure build-out.
What does NTT’s JKT2A facility and APN Connect service add to Indonesia’s data centre ecosystem?
NTT opened JKT2A, a Tier III certified site in Jakarta with 12MW of IT capacity, and launched APN Connect, a Layer 1 direct link to its JKT3 facility approximately 35km away. This addition provides Indonesian operators with redundancy optionality, low-latency interconnect for disaster recovery, and incremental Tier III capacity within Jakarta’s metro area.
Published by
eNOVA Technologies is Singapore's specialist distributor for data centre IT management solutions, representing Adder, Guntermann & Drunck, Raritan, Sunbird, ZPE Systems, and VuWall across Singapore and Southeast Asia. Our technical content is produced with AI assistance and reviewed by our in-house team before publication.
This article was produced with AI assistance and reviewed by the eNOVA Technologies team. All technical claims are verified against manufacturer documentation.
