A/77/92
cybersecurity within their organizations. In 2022, the Agency will launch a critical
information infrastructure supply chain programme, involving stakeholders such as
government agencies, critical information infrastructure owners and their vendors.
The programme will provide recommended processes and sound practices for all
stakeholders to manage cybersecurity risks in the supply chain.
Enabling a safer cyberspace
As part of our efforts to raise the national cybersecurity posture in Singapore,
the Cyber Security Agency launched the Safer Cyberspace Master Plan in 2020 to:
(a) secure the core digital infrastructure of Singapore; (b) safeguard cyberspace
activities; and (c) empower our cybersavvy population. The Master Plan outlines 11
initiatives aimed at increasing the adoption of security by design among enterprises
and organizations, as well as enhancing cybersecurity awareness and good
cyberhygiene practices among end users. All enterprises and organizations have a role
to play in safeguarding our broader cyberspace activities. To facilitate this, the
Agency has launched a number of schemes to raise stakeholder awareness of
cybersecurity, such as cybersecurity toolkits targeted at different enterprise
stakeholders. This is complemented by cybersecurity certification for enterprises in
the form of the Cyber Trust and Cyber Essentials marks to recognize enterprises with
comprehensive cybersecurity measures and practices.
The Cyber Security Agency has issued public advisories to guide enterprises
and the general public on managing and navigating cyberrelated vulnerabilities and
threats when they arise. For example, the Agency issued a public advisory on the
recent Log4Shell vulnerability and worked with trade associations and chambers to
brief Singaporean enterprises on how to address the vulnerability and secure their
systems. Additionally, the Agency has standing advisories addressing cybercrime,
such as a public advisory discouraging victims from paying ransoms to ransomware
actors.
There are increasing cybersecurity risks associated with the proliferation of the
Internet of things, given its expansive connectivity and lack of cybersecurity
provisioning. The Cyber Security Agency has leveraged technical standards to raise
cyberhygiene and provide assurance on products and services. In 2020, the Agency
launched the Cybersecurity Labelling Scheme for consumer Internet of things
devices. Over 150 labelled products are now on the market. Singapore is also a strong
advocate of international rule-based standards and is a certificate-authorizing nation
under the common criteria recognition arrangement. 4 International standards will help
to raise cyberhygiene, secure cyberspace collaboratively and lower barriers to trade
across borders. Singapore hopes to work with like-minded partners to develop a
universal labelling framework for the security of the consumer Internet of things to
harmonize established international standards and labe lling requirements, as well as
to facilitate mutual recognition of such standards. This would serve to minimize the
fragmentation of standards, eradicate duplicated testing across countries, reduce the
cost of compliance with national regulations and facilitate market access for
developers.
Developing a vibrant cybersecurity ecosystem
Singapore recognizes that strengthening cybersecurity involves building up the
cyberecosystem and encouraging innovation within the industry. Given the rapidly
evolving cyberthreat landscape, cybersecurity firms need to constantly innovate and
invest in new solutions to stay ahead of the curve. The Cyber Security Agency
supports industry-led innovation in cybersecurity through the Cybersecurity Industry
__________________
4
20/34
See www.commoncriteriaportal.org.
22-08761
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents