Singapore updates its national cybersecurity strategy

Strategy 2021 will take a more proactive stance to address threats, raise the overall level of cybersecurity across the nation, and advance international norms and standards on cybersecurity. It will also emphasise greater workforce and ecosystem development for businesses and citizens to capitalise on economic opportunities in the cybersecurity sector.

“This strategy articulates Singapore's approach to safeguarding our wider cyberspace in an increasingly complex environment,” says Singapore Senior Minister and Coordinating Minister for National Security Teo Chee Hean, at the opening ceremony of the Singapore International Cyber Week (SICW) 2021.

“It acknowledges the need for consensus-building and deepening collaboration through [international] discussions, and the development and implementation of cybersecurity standards at the national level to raise the minimum standard of cybersecurity in ICT products and services that we use. [It also highlights the need to] build organisational capability and for talent development,” he adds.

Here are the five key areas under Strategy 2021, which will guide Singapore’s goals and priorities over the next few years:

See also: Testing QA New Section BDC Feature Winner 1

1. Build a resilient infrastructure
   The government will ensure its policy frameworks remain fit-for-purpose to address growing cyber-physical risks.
   
   The Cyber Security Agency of Singapore (CSA) will work closely with critical information infrastructure (CII) owners and sector leads to strengthen the cybersecurity of operational technology systems – such as industrial control systems, building management systems – where cyber attacks could pose physical and/or economic risks.
   
   In line with that, CSA will launch the Operational Technology Core Competency Framework (OTCCF). Enterprises can leverage OTCCF to establish processes, structures, or jobs to manage operational technology cybersecurity within the organisation.
   
   CSA also recognises there are non-CII entities whose disruption could have significant repercussions to the rest of Singapore. As such, the agency will explore expanding the government’s regulatory remit under the Cybersecurity Act to include entities and systems beyond CIIs.
   
2. Enable a safer cyberspace
   Despite consistently raising awareness and encouraging the adoption of good cyber hygiene since 2016, adoption of such practices amongst enterprises and individuals remains low.
   
   Strategy 2021 will therefore focus on making it easier and more convenient for end-users to secure their devices, use secure applications and strengthen data protection. End-users can look forward to the free self-help tools developed by CSA, and the Better Data Driven Business programme by the Infocomm Media Development Authority (IMDA).
   
3. Enhance international cyber cooperation
   Through CSA, Singapore will raise its level of involvement in international cyber discussions.
   
   As the Chair of the Open-Ended Working Group on Security of and in the Use of ICTs from 2021 to 2026, Singapore will actively contribute to and advance international cyber norms discussions.
   
   It will also support the global effort to raise the capacities of States to protect themselves against cyber threats. To this end, Singapore will encourage the development and implementation of cybersecurity standards such that a minimum level of cybersecurity exists in the ICT products and services used by citizens and businesses.
   
4. Develop a vibrant cybersecurity ecosystem
   With growing cybersecurity needs, the cybersecurity ecosystem will become even more important to meet national security and economic needs.
   
   As such, the Singapore government will galvanise all stakeholders to develop advanced capabilities, build world-class products and services, and grow the local cybersecurity market.
   
   It will also establish entrepreneurship programmes and platforms that facilitate Business-to-Business meetings, which stakeholders can leverage to develop “Made in Singapore” solutions.
   
5. Grow a robust talent pipeline
   Since the successful execution of the cybersecurity strategy hinges on Singapore’s people and talent, Strategy 2021 will emphasise the development of a strong cybersecurity workforce as a foundational enabler.
   
   The government will support youth, women and mid-career professionals in pursuing a cybersecurity career through facilitating access to cybersecurity boot camps, mentorship opportunities and professional conversion programmes.
   
   It will also invest heavily to upskill practising professionals so that they can keep pace with the ever-evolving cyber threat landscape.

Since cybersecurity is a team sport, everyone has a role to play. While the government will take the lead in rolling out many of the initiatives within, Strategy 2021 is a call to action for all stakeholders to leverage the resources and opportunities outlined and contribute to the nation’s cybersecurity.

"Let us work together to maintain an open, secure and interoperable cyberspace, to realise the potential and promise of the exciting new possibilities that are fast, opening up in the digital domain," says Teo.

Photo: Unsplash