CHAPTER 3 SINGAPORE’S CYBERSECURITY STRATEGY – DEVELOPMENTS IN 2018 PILLAR FOUR: STRENGTHENING INTERNATIONAL PARTNERSHIPS ASEAN cybersecurity and ICT Ministers at the 3rd AMCC in September 2018 agreed to subscribe in-principle to the 11 voluntary, nonbinding norms recommended in the 2015 UNGGE report. Source: CSA. Singapore is an active participant at international platforms and fora on cybersecurity. As an ASEAN member, Singapore supported and contributed to regional efforts to build cybersecurity capabilities. Singapore is partnering with the UN Office for Disarmament Affairs (UNODA) on an online training course to promote understanding and implementation of agreements reached by the UNGGE, and a UNSingapore Cyber Programme to build awareness of cyber norms and cyber scenario policy planning in ASEAN Member States. FEATURED TOPIC GALVANISING GLOBAL EFFORTS In 2017, the National Cyber Security Centre of The Netherlands (NCSCNL) together with CSA conducted a landscape study to identify gaps in Internet of Things (IoT) security standards and technology. The findings were refined into a set of working initiatives for IoT security that were jointly proposed by Singapore and The Netherlands at the Annual Meeting of the Global Forum on Cyber Expertise (GFCE), co-branded with SICW’s IoT Security Roundtable, during SICW 2018. The initiatives aimed to lead and galvanise global efforts in creating a safer and more secure IoT. In the initial phase of the IoT Security Initiative, NCSC-NL and CSA agreed to prioritise the efforts on three most critical areas, namely, Certification and Testing, Supply Chain Security, and Unique Device Identities. 44 Singapore has consistently advocated for the international community to build consensus and develop a rules- and norms-based international order in cyberspace, where its users can remain safe and secure. Singapore stands ready to work with all parties toward closer international cooperation in the cyber and digital sphere. – Mr S. Iswaran, Minister for Communications and Information, and Minister-in-Charge of Cybersecurity, on Singapore’s efforts in building a safe and secure cyberspace In April 2018, under Singapore’s ASEAN Chairmanship, a first-ever ASEAN Leaders’ Statement on Cybersecurity Cooperation was adopted at the 32nd ASEAN Summit. Singapore has worked closely with ASEAN Member States, industry partners and international organisations such as the INTERPOL Global Complex for Innovation to follow up on tasks set by ASEAN Leaders. Singapore hosted the annual ASEAN Ministerial Conference on Cybersecurity (AMCC) over the past three years to bring together Ministers from all ASEAN Member States who are responsible for ICT and cybersecurity issues, including the ASEAN Secretary-General. We helped to draft the ASEAN Cybersecurity Cooperation Strategy, which was adopted in March 2017 and provides a blueprint for coordination of cybersecurity capacity building efforts. Participants at the 3rd AMCC in September 2018 agreed to subscribe in-principle to the 11 voluntary, non-binding norms recommended in the 2015 Report of the United Nations Group of Governmental Experts on Developments in the Field of Information and Telecommunications in the Context of International Security (UNGGE). They also agreed to focus on regional capacity building in implementing these norms. FEATURED TOPIC ENHANCING CAPACITY AND CAPABILITIES IN CYBERSECURITY TOGETHER Singapore will launch the S$30 million ASEAN-Singapore Cybersecurity Centre of Excellence (ASCCE) in 2019, an extension of the S$10 million ASEAN Cyber Capacity Programme that has been contributing to the enhancement of ASEAN’s cybersecurity capabilities in both the technical and policy aspects. The ASCCE will complement existing initiatives, such as the ASEAN-Japan Cybersecurity Capacity Building Centre in Thailand. It will focus on strengthening ASEAN Member States’ cyber strategy development, legislation and research capabilities, increasing technical expertise and incident response skills of national CERTs in the region. The ASCCE will also promote CERTto-CERT open-source information sharing. 45