A/77/92 cybersecurity within their organizations. In 2022, the Agency will launch a critical information infrastructure supply chain programme, involving stakeholders such as government agencies, critical information infrastructure owners and their vendors. The programme will provide recommended processes and sound practices for all stakeholders to manage cybersecurity risks in the supply chain. Enabling a safer cyberspace As part of our efforts to raise the national cybersecurity posture in Singapore, the Cyber Security Agency launched the Safer Cyberspace Master Plan in 2020 to: (a) secure the core digital infrastructure of Singapore; (b) safeguard cyberspace activities; and (c) empower our cybersavvy population. The Master Plan outlines 11 initiatives aimed at increasing the adoption of security by design among enterprises and organizations, as well as enhancing cybersecurity awareness and good cyberhygiene practices among end users. All enterprises and organizations have a role to play in safeguarding our broader cyberspace activities. To facilitate this, the Agency has launched a number of schemes to raise stakeholder awareness of cybersecurity, such as cybersecurity toolkits targeted at different enterprise stakeholders. This is complemented by cybersecurity certification for enterprises in the form of the Cyber Trust and Cyber Essentials marks to recognize enterprises with comprehensive cybersecurity measures and practices. The Cyber Security Agency has issued public advisories to guide enterprises and the general public on managing and navigating cyberrelated vulnerabilities and threats when they arise. For example, the Agency issued a public advisory on the recent Log4Shell vulnerability and worked with trade associations and chambers to brief Singaporean enterprises on how to address the vulnerability and secure their systems. Additionally, the Agency has standing advisories addressing cybercrime, such as a public advisory discouraging victims from paying ransoms to ransomware actors. There are increasing cybersecurity risks associated with the proliferation of the Internet of things, given its expansive connectivity and lack of cybersecurity provisioning. The Cyber Security Agency has leveraged technical standards to raise cyberhygiene and provide assurance on products and services. In 2020, the Agency launched the Cybersecurity Labelling Scheme for consumer Internet of things devices. Over 150 labelled products are now on the market. Singapore is also a strong advocate of international rule-based standards and is a certificate-authorizing nation under the common criteria recognition arrangement. 4 International standards will help to raise cyberhygiene, secure cyberspace collaboratively and lower barriers to trade across borders. Singapore hopes to work with like-minded partners to develop a universal labelling framework for the security of the consumer Internet of things to harmonize established international standards and labe lling requirements, as well as to facilitate mutual recognition of such standards. This would serve to minimize the fragmentation of standards, eradicate duplicated testing across countries, reduce the cost of compliance with national regulations and facilitate market access for developers. Developing a vibrant cybersecurity ecosystem Singapore recognizes that strengthening cybersecurity involves building up the cyberecosystem and encouraging innovation within the industry. Given the rapidly evolving cyberthreat landscape, cybersecurity firms need to constantly innovate and invest in new solutions to stay ahead of the curve. The Cyber Security Agency supports industry-led innovation in cybersecurity through the Cybersecurity Industry __________________ 4 20/34 See www.commoncriteriaportal.org. 22-08761

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents