Singapore passes key cybersecurity amendment bill to combat risks

The amendments will extend its scope beyond critical information.

The Singapore Parliament passed the Cybersecurity (Amendment) Bill on 7 May, crucial for enhancing Singapore’s cybersecurity framework and digital advancement, said Clyde & Co. in an insight.

Currently, the Cybersecurity Act covers Critical Information Infrastructure (CII) in Singapore. 

The amendments will extend its scope to include CIIs, owners of Systems of Temporary Cybersecurity Concern (STCC), Entities of Special Cybersecurity Interest (ESCI), and Foundational Digital Infrastructure (FDI) service providers.

CIIs are essential computer systems whose loss or compromise could disrupt essential services in Singapore, such as utilities and banking. The amendments:

• Expand protection to virtual systems, including cloud computing.
• Ensure essential service providers using third-party CIIs meet cybersecurity standards.
• Extend coverage to CIIs located entirely outside Singapore.
• Require reporting of additional cybersecurity incidents affecting interconnected systems.

ALSO READ: Only 60% of financial firms have cyber risk plans

STCCs are critical systems at high risk of cyberattacks that, if compromised, could harm national security, defense, or public safety. On the other hand, ESCIs store sensitive data or perform critical functions whose disruption could impact Singapore's defence, economy, or public safety. For FDIs, its vital systems are necessary for foundational digital services, whose loss could disrupt many businesses. 

The amendments to the Cybersecurity Act are essential for strengthening Singapore’s cybersecurity and enhancing trust in digital services, pressed Clyde & Co. CIIs, STCCs, ESCIs, and FDIs should review their processes to ensure compliance with the updated Act. For further assistance, contact the authors of this article.