(b) amend or revoke any code of practice or standard of performance issued or
approved under paragraph (a).
(2) If any provision in any code of practice or standard of performance is inconsistent
with this Act, such provision, to the extent of the inconsistency, does not have effect.
(3) Where a code of practice or standard of performance is issued, approved,
amended or revoked by the Commissioner under subsection (1), the Commissioner
must —
(a) publish a notice of the issue, approval, amendment or revocation (as the
case may be) in such manner as will secure adequate publicity for such
issue, approval, amendment or revocation;
(b) specify in the notice the date of the issue, approval, amendment or
revocation (as the case may be); and
(c) ensure that, so long as the code of practice or standard of performance
remains in force, copies of that code or standard, and of all amendments to
that code or standard, are available free of charge to the owner of a critical
information infrastructure to which that code or standard applies.
(4) None of the following has any effect until the notice relating to it is published in
accordance with subsection (3):
(a) a code of practice or standard of performance;
(b) an amendment to a code of practice or standard of performance;
(c) a revocation of a code of practice or standard of performance.
(5) Any code of practice or standard of performance has no legislative effect.
(6) Subject to subsections (4) and (7), every owner of a critical information
infrastructure must comply with the codes of practice and standards of performance that
apply to the critical information infrastructure.
(7) The Commissioner may, either generally or for such time as the Commissioner
may specify, waive the application to the owner of a critical information infrastructure of
any code of practice or standard of performance, or any part of it.
Power of Commissioner to issue written directions
12.—(1) The Commissioner may, if the Commissioner thinks —
(a) it is necessary or expedient for ensuring the cybersecurity of a critical
information infrastructure or a class of critical information infrastructure;
Singapore Statutes Online
Published in Acts Supplement on 12 Mar 2018
PDF created date on: 30 Aug 2022
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents