FOREWORD 2017 saw some high-profile cyber-attacks globally on national institutions and Critical Information Infrastructure. More worryingly, there was a shift from profit-motivated attacks towards those aimed at causing massive disruptions, such as the WannaCry ransomware campaign. Given Singapore’s connectivity, what happens globally is often immediately felt here. WannaCry similarly hit some businesses here, but the impact was not as widespread or disruptive as seen elsewhere. The discovery of the “kill switch” over the weekend, when most businesses were shut, helped. However, other cyber-attacks struck elsewhere against government agencies, businesses, and individuals. The breaches suffered by two of our universities and the Ministry of Defence’s Internet access system during the course of 2017 reflect the increasingly targeted nature of cyber-attacks. These attacks were carefully planned, and were not the work of casual hackers or criminal gangs. Cybersecurity is not just about threats, but also opportunities – for businesses and individuals. I am particularly encouraged to see greater awareness and interest in cybersecurity among the youth. Six talented youth from Singapore pitted their skills against some of the best in the Cyber Security Challenge UK in November 2017, in rounds of tests that included fending off live cyber-attacks. As cyber-attacks grow in scale and complexity, we will need to grow the talent pool to defend our cyberspace. As we review Singapore's cyber landscape in 2017, we hope to draw out the lessons learnt from the incidents of the past year, so that we can be better equipped to tackle the threats in the future. Singapore’s move towards being a Smart Nation will bring benefits to many. But we need everyone to be savvy users of this connectivity. We know that we are only as strong as our weakest link. Therefore, we all need to do our part to ensure basic cyber hygiene is in place, such as using stronger passwords, to keep our networks trusted and secure. We hope that this second edition will provide more practical information for you to do your part in keeping Singapore’s cyberspace safe and trustworthy for all. David Koh Commissioner of Cybersecurity and Chief Executive Cyber Security Agency of Singapore 2 3