Organization:Cyber Security Agency
 | |
| Agency overview | |
|---|---|
| Formed | 1 April 2015 |
| Jurisdiction | Government of Singapore |
| Headquarters | 5 Maxwell Road, #03-00, Tower Block, MND Complex, Singapore 069110 |
| Minister responsible |
|
| Agency executive |
|
| Parent agency | Prime Minister's Office (de jure) Ministry of Communications and Information (de facto) |
| Website | csa |
The Cyber Security Agency (CSA) is a government agency under the Prime Minister's Office, but is managed by the Ministry of Communications and Information of the Government of Singapore. It provides centralised oversight of national cyber security functions and works with sector leads to protect Singapore's Critical Information Infrastructure (CII), such as the energy and banking sectors.[1][2] Formed on 1 April 2015, the agency also engages with various industries and stakeholders to heighten cyber security awareness as well as to ensure the development of Singapore's cyber security. It is headed by the Commissioner of Cybersecurity, David Koh.[3][4][5][6][7][8]
History and overview
The Cyber Security Agency took over the functions previously carried out by the Singapore Infocomm Technology Security Authority (SITSA), under the Ministry of Home Affairs. SITSA was set up in 2009 as the national specialist authority overseeing operational IT security.
The CSA also took over some roles undertaken by the then-Infocomm Development of Authority (IDA) such as the Singapore Cyber Emergency Response Team (SingCERT), which facilitates the detection, resolution and prevention of security-related incidents on the Internet.
The agency builds upon the government's cyber security capabilities, which include strategy and policy development, cyber security operations, industry development and outreach; as well as public communications and engagement.
It has organised events such as the Singapore International Cyber Week (SICW) in 2016, with over 5,000 attendees from close to 50 countries. The SICW also saw the launch of Singapore's Cybersecurity Strategy.
In 2017, the second edition of the SICW was held from 18 to 21 September 2017. It also hosted the 2nd ASEAN Ministerial Conference on Cybersecurity.[9]
Singapore's Cybersecurity Strategy
In October 2016, then-Prime Minister Lee Hsien Loong launched Singapore's Cybersecurity Strategy with the aim to create a resilient and trusted cyber environment for Singapore. Four pillars underpinned the strategy:
- Building a Resilient Infrastructure
- Creating a Safer Cyberspace
- Developing a Vibrant Cybersecurity Ecosystem
- Strengthening International Partnerships
Singapore's revised goals were outlined in the Singapore Cybersecurity Strategy 2021.[10] As a result, Singapore's cybersecurity plan, which was originally implemented in 2016, was reviewed and updated.
Cutting off internet access
In 2016, as part of Singapore's Cybersecurity Strategy, it was announced that internet access of civil servants' work stations will be cut-off. David Koh, chief executive of the then-newly formed agency, said officials realised there was too much data to secure and "there is no way to secure this because the attack surface is like a building with a zillion windows, doors, fire escapes".[11]
Security experts commented that the move may only raise the defense against cyber attacks slightly but risk damaging the productivity of civil servants and those working at more than four dozen statutory boards, and cutting them off from the people they serve.[11]
Singapore's Cybersecurity Programmes
Singapore Cyber Security Agency has launched various programmes to support its strategy, including:[12]
- CSA Common Criteria
- CSAT Programme
- Cybersecurity Labelling Scheme [13]
- Cybersecurity Career Mentoring Programme
- Cybersecurity Co-innovation and Development Fund
- ICE71 [14]
- PSG Cybersecurity Solutions
- SG Cyber Safe Seniors
- SG Cyber Safe Students
- SG Cyber Talent.[15] These initiatives include:
- Cyber Security Associates and Technologists (CSAT) programme with Infocomm Media Development Authority (IMDA);
- Cybersecurity Career Mentoring programme with the Singapore Computer Society (SCS);
- SG Cyber Women initiative;[16][17]
- SG Cyber Educators Programme; and
- SG Cyber Youth Programme.
- SG Cyber Safe Programme.[18]
Singapore’s Cyber Security Agency launched a new cyber security certification scheme recognizing organisations with good cyber security practices at the end of March 2022. [19][20][21]
See also
- National Cyber Security Centre
- Government Technology Agency (GovTech)
References
- ↑ "Singapore's Cybersecurity Act to be reviewed, could include non-critical information infrastructure". https://www.businesstimes.com.sg/government-economy/singapores-cybersecurity-act-to-be-reviewed-could-include-non-critical.
- ↑ Auto, Hermes (4 March 2022). "Budget debate: Widely used services, apps soon to comply with govt cyber-security rules | The Straits Times". https://www.straitstimes.com/singapore/politics/budget-debate-widely-used-services-apps-soon-to-comply-with-govt-cyber-security-rules.
- ↑ "Senior leaders have key role in cyber security: Commissioner" (in en). 15 November 2018. https://www.straitstimes.com/singapore/senior-leaders-have-key-role-in-cyber-security-commissioner. Retrieved 8 July 2020.
- ↑ Lin, Cheryl (23 April 2021). "Cabinet reshuffle: Josephine Teo to head Smart Nation Initiative; new roles for political office holders" (in en). CNA. https://www.channelnewsasia.com/news/singapore/cabinet-reshuffle-josephine-teo-head-smart-nation-new-14679076.
- ↑ "Speech by Minister Josephine Teo at the Ministry Of Communications and Information COS Debate 2022". https://www.csa.gov.sg/News/Speeches/speech-by-minister-josephine-teo-at-the-ministry-of-communications-and-information-cos-debate-2022.
- ↑ "Singapore Encouraging Women to Work in Cybersecurity Industry - OpenGov Asia". 25 March 2022. https://opengovasia.com/singapore-encouraging-women-to-work-in-cybersecurity-industry/.
- ↑ "SG Cyber Talent Development Fund to launch this month: MCI Minister Josephine Teo". https://www.businesstimes.com.sg/technology/sg-cyber-talent-development-fund-to-launch-this-month-mci-minister-josephine-teo.
- ↑ "Singapore government patching systems after alert on 'critical' Log4j software vulnerability". https://www.channelnewsasia.com/singapore/log4j-vulnerability-csa-raises-alert-patch-systems-cybersecurity-2386496.
- ↑ "Joint Call on Acting Prime Minister Teo Chee Hean by Participants of the 2nd ASEAN Ministerial Conference on Cybersecurity". https://www.nas.gov.sg/archivesonline/data/data/pdfdoc/20170919015/Joint%20Call%20on%20Acting%20Prime%20Minister%20Teo%20Chee%20Hean%20by%20Participants%20of%20the%202nd%20ASEAN%20Ministerial%20Conference%20on%20Cybersecurity.pdf.
- ↑ "The Singapore Cybersecurity Strategy 2021". https://www.csa.gov.sg/News/Publications/singapore-cybersecurity-strategy-2021.
- ↑ 11.0 11.1 "Singapore to cut off public servants from the internet". The Guardian. 24 August 2016. https://www.theguardian.com/technology/2016/aug/24/singapore-to-cut-off-public-servants-from-the-internet.
- ↑ "Programs". https://www.csa.gov.sg/Programmes/csa-common-criteria/about.
- ↑ "Cybersecurity Labelling Scheme (CLS)". https://www.csa.gov.sg/Programmes/cybersecurity-labelling/about-cls.
- ↑ "Parliament: Singapore to start first cyber-security start-up hub". The Straits Times. https://www.straitstimes.com/politics/parliament-singapore-to-start-first-cyber-security-start-up-hub.
- ↑ "SG Cyber Talent". https://www.csa.gov.sg/Programmes/SGCyberTalent/About.
- ↑ "SG Cyber Women". https://www.csa.gov.sg/Programmes/SGCyberTalent/SGCyberWomen.
- ↑ "SG Cyber Women X ICE71: Start-up Women in Cybersecurity". https://enterprise.nus.edu.sg/event/sg-cyber-women-x-ice71-start-up-women-in-cybersecurity/.
- ↑ "SG Cyber Safe Programme". https://www.csa.gov.sg/Programmes/sgcybersafe/about.
- ↑ "Singapore rolls out cyber security certification scheme". https://www.computerweekly.com/news/252515222/Singapore-rolls-out-cyber-security-certification-scheme.
- ↑ "Singapore Introduces Cybersecurity Certification Programme". April 2022. https://opengovasia.com/singapore-introduces-cybersecurity-certification-programme/.
- ↑ "Singaporean cybersecurity agency launches certification scheme for businesses". 5 April 2022. https://portswigger.net/daily-swig/singaporean-cybersecurity-agency-launches-certification-scheme-for-businesses.
External links
 |  |
