Strengthening legislation and the criminal justice framework C The investigation of cybercrimes and prosecution of cybercriminals must be supported by a robust criminal justice framework. Laws need to be updated to deal with new cyber-offences and traditional crimes committed online. Regulatory frameworks have to be constantly strengthened to prevent criminals from taking advantage of loopholes. Stepping up partnerships and international engagement D Industry and Academic Partnerships Deep expertise to deal with cybercrimes need not just reside with the Government and can be found within the private sector and academia. Given the rapidly evolving nature of cybercrime, the Government will work closely with industry players and Institute of Higher Learning (IHLs) so that the necessary information and expertise to deal with the latest threat posed by cybercrime can be shared seamlessly. 28 CHAPTER 2 (i) Amending the Computer Misuse and Cybersecurity Act (iii) Strengthening regulatory frameworks MHA intends to amend the Computer Misuse and Cybersecurity Act (CMCA), to ensure that the Act continues to be effective in dealing with the transnational nature of cybercrimes, as well as the evolving tactics of cybercriminals. Aside from public education and outreach, a key method of cybercrime prevention is to increase the difficulty of committing such offences by plugging potential loopholes in digital platforms and processes. MHA will regularly review regulatory frameworks, to ensure that cybercriminals are not able to exploit vulnerabilities in technology. (ii) Reviewing other laws In addition to amending the CMCA, MHA will review other related laws such as the Criminal Procedure Code to ensure that these laws remain relevant in dealing with traditional crimes that are committed in cyberspace. (i) Increasing cybercrime awareness in the private sector (ii) Developing capabilities to combat cybercrime MHA has partnered industry and IHLs to increase awareness of cybercrimes in the private sector. SPF regularly engages key private sector stakeholders, such as those from the Infocomm Technology and banking industries to enhance cybercrime prevention efforts, raise awareness of cybercrimes and encourage the adoption of good cyber hygiene practices. The Government has also collaborated with the private sector to jointly develop capabilities to respond to the latest cyber threats. For instance, SPF has partnered local research institutes to develop new cybercrime investigations and forensics capabilities. MHA has also worked with IHLs to create conducive environments for the development of cyber-related innovations. One example is MHA and Temasek Polytechnic’s joint establishment of the Temasek Advanced LEarning, Nurturing and Testing (TALENT) Lab, which serves as a platform for IHL students to design and validate innovations, to see if they are effective in dealing with cyber-threats. Prevention is key in countering the threat of cybercrime The scale and complexity of cybercrime will continue to grow, with its transnational nature posing legal and operational difficulties for law enforcement agencies. Prevention is therefore still the key strategy to counter the threat of cybercrime. The NCAP will prioritise educating International engagement Strong international partnerships enable countries to deal with cybercrime more effectively. Singapore will actively foster regional and global cooperation, partner INTERPOL and other countries in capacity building initiatives, and bring global experts and thought leaders together to discuss the latest threats, trends and solutions in the cyber domain, and share best practices and solutions. and empowering the public to be safe in cyberspace. Through the various initiatives in the NCAP, the Government will build strong partnerships with industry, IHLs and the public, and forge a sense of shared responsibility in the fight against cybercrime. (i) Fostering regional and global cooperation Singapore is at the forefront of working with foreign countries to enhance our operational cooperation against cybercrime. At the regional level, Singapore is the Association of Southeast Asian Nations (ASEAN) Voluntary Lead Shepherd on Cybercrime. This provides a platform for the ASEAN Member States (AMS) to coordinate the regional approach to cybercrime, and work together on capacity building, training and the sharing of information. At the international level, Singapore hosts the INTERPOL Global Complex for Innovation (IGCI), INTERPOL’s global hub on cybercrime. Singapore has led the IGCI Working Group and INTERPOL Operational Expert Group on Cybercrime, working with other INTERPOL member countries to define INTERPOL’s cybercrime programme. Singapore will leverage INTERPOL’s resources to strengthen our global operational networks and build new capabilities to tackle cybercrime. (ii) Building capacities and capabilities through collaboration at the regional and global levels Singapore has rolled out several programmes with partner countries and INTERPOL. This includes the two-year (2016 – 2018) ASEAN Cyber Capacity Development Project funded by Japan and implemented by INTERPOL, the Singapore-United States Third Country Training Programme, and the ASEAN Plus Three Cybercrime Workshop, involving the People’s Republic of China, Japan and the Republic of Korea. The involvement of key Asian partners, AMS and INTERPOL facilitates a conducive environment for collaboration on cybercrime issues and sharing of best practices, and forging of effective operational links between countries and across the regions. (iii) Bringing global experts and thought leaders together Since 2013, Singapore has been supporting thought leadership platforms that bring together public sector and industry partners on cybercrime. One such example is the RSA Conference Asia Pacific and Japan (RSAC APJ). Held annually in Singapore, the RSAC APJ is Asia Pacific’s leading conference on information security. CHAPTER 2 29