Looking Ahead CSA’s Response to COVID-19 CSA’s Response to COVID-19 Looking Ahead Cyber incidents linked to COVID-19 are likely to persist so Since reports of coronavirus infections started proliferating around the world, CSA has heightened monitoring of COVID-19related cyber threats and malicious activities. Concurrently, CSA is working with Singapore’s CII sectors to maintain cybersecurity resilience and readiness, and ensure the continuity of essential duties pertaining to COVID-19 outbreak. To this end, CII Owners (CIIOs) have adopted split team arrangements for their critical cybersecurity functions and implemented precautionary cybersecurity measures. CSA also issues periodic alerts to CIIOs to share information on COVID-19related malicious cyber activities and mitigation measures for safeguarding network gateways and network infrastructure devices. Orange and subsequently into the “Circuit Breaker” period, CSA implemented a number of measures to mitigate the risks of the increased reliance on digital platforms and applications: • Identifying a list of companies to continue providing cybersecurity services in support of CII sectors and Singapore’s digital economy; • Increasing public outreach, by pushing out advisories and infographics to businesses and the public, including tips on implementing secure remote work policies, using online meeting platforms safely, as well as measures to protect themselves from COVID-19-related malicious activities; • Maintaining close ties with our foreign and information on the latest cybersecurity threats and vulnerabilities; and • Collaborating with the Ministry of Health (MOH), Smart Nation and Digital Government Office (SNDGO) and GovTech to secure applications and online platforms implemented to support contact tracing and other important functions. 54 The “Disease Outbreak Response System Condition” (DORSCON) is a colour-coded framework that shows the current disease situation in Singapore. In order of severity, DORSCON covers four levels, namely Green, Yellow, Orange, and Red. SINGAPORE CYBER LANDSCAPE 2019 infections gradually flattens and we move closer towards normalcy, we anticipate the following cyber-related developments around the world: Economy Government There will be a stronger drive among businesses With the economy reeling from the effects of the pandemic, the number of applications for government relief measures and grants will almost certainly increase. This may attract more phishing e-mails from cyber threat actors posing as government entities or eligible citizens and businesses. Official portals that receive and process such applications may also be at risk of being crippled by DDoS or ransomware attacks, an extended episode of which could cause widespread frustration and slow down recovery efforts. to digitalise and build capacity to operate remotely. counterparts, exchanging best practices 60 public interest. Even as the graphical curve of COVID-19 As the country transitioned into DORSCON60 incident response, crisis preparedness and digital forensics during the long as the pandemic continues to generate a high level of During the pandemic, business owners will have realised the importance of moving online, in the event that they are required to suspend physical operations. This exponential rate of economic digitalisation will broaden the attack surface. However, unless businesses invest further in cybersecurity, they will face heightened risk of malicious cyber activities, such as ransomware, DDoS attacks, and data theft. Telecommuters will continue to constitute a sizeable pool of potential targets for threat actors, as a significantly larger proportion of the workforce is likely to continue telecommuting compared to pre-COVID-19 levels.61 This is especially since telecommuting will allow businesses to save on substantial overheads and maximise profits. Moreover, market demand may spur technology firms to devise platforms and solutions to improve the telecommuting experience by addressing productivity pitfalls and lessons learnt during the pandemic. 61 Society While the majority of the public would look forward to the resumption of their daily activities — from going to the theatre to shopping for clothes — many may choose to stick with the online alternatives. Continuing high demand for online entertainment, e-retail and delivery services could motivate threat actors to conduct further malicious activities against the most popular of these platforms. Dingel, Jonathan and Neiman, Brent. “How Many Jobs Can be Done at Home?” Becker Friedman Institute, University of Chicago, 16 April 2020, https://bfi.uchicago. edu/wp-content/uploads/BFI_White-Paper_Dingel_Neiman_3.2020.pdf. 55