Foreword Foreword CSA also continued to raise Singapore’s cybersecurity standards in 2019. For example, we launched Singapore’s Operational Technology (OT) Cybersecurity Masterplan, which serves as a strategic blueprint to guide the development of capabilities to secure Singapore’s OT environment. We also held the third run of Exercise Cyber Star, where participants from public and private sectors tackled complex cyber scenarios to hone their incident response plans. In our continuing efforts to develop a vibrant cybersecurity ecosystem, CSA introduced the “SG Cyber Women” initiative, to ensure a pipeline of talent and encourage more women to join Singapore’s cybersecurity workforce. Since its emergence in late-2019, COVID-19 has quite literally wreaked havoc all over the world. Borders On the international front, CSA made strides in facilitating have been closed, air travel has ground to a halt, while international cooperation in cyber. The ASEAN-Singapore economies, societies and many aspects of human Cybersecurity Centre of Excellence will enhance capacity activity have come to a standstill. However, even as building efforts of greater scope and depth within the nations fight to stem the effects of this pandemic, region. CSA also represented Singapore in actively threat actors have brazenly exploited public fear and contributing to discussions towards a rules-based uncertainty over the coronavirus to carry out malicious international order in cyberspace, through key platforms cyber activities, which included phishing campaigns and such as the Group of Governmental Experts and Open- ransomware attacks on hospitals and medical facilities. Ended Working Group at the United Nations. As many organisations adopt “work from home” These are some of CSA’s work that we have detailed in arrangements, threat actors are likely to capitalise on this fourth edition of the Singapore Cyber Landscape, the new opportunities to gain unauthorised access which I hope you will find useful. Threats in cyberspace to users’ data or the organisations’ networks. Aside are ever-evolving, and CSA has strived to present a from these new threats which have emerged from comprehensive account of the key issues and incidents the COVID-19 pandemic, cyber-attacks have already of 2019, alongside advice and insights into how become more prevalent in 2019, with an upsurge of organisations and individuals can better improve their malicious cyber activities locally. Compared to 2018, cybersecurity. Some have mentioned that cybersecurity local observations of website defacements, phishing, is a team sport, and this saying is now more true than ransomware, and Command and Control (C&C) servers ever. Only by standing together can we overcome the and botnet drones all rose in 2019. Several serious cyber challenges of both the physical and virtual worlds. incidents also occurred in various sectors, examples of #SGUNITED which are detailed in this publication. The Cyber Security Agency of Singapore (CSA) responded robustly to the increase in malicious cyber threats. This includes taking a proactive role in helping organisations deal with harmful phishing attempts, through analysing malicious e-mails, and subsequently blocking similar e-mails to avert a recurrence of such scams. CSA has also responded swiftly and decisively to take down C&C servers that triggered Distributed Denial-of-Service (DDoS) attacks, and prevented further damage to organisations. These are among the measures undertaken by CSA to make cyberspace safer for businesses and individuals in Singapore. David Koh Commissioner of Cybersecurity and Chief Executive Cyber Security Agency of Singapore 3