CHAPTER 1 Build Resilient Infrastructure WHAT’S NEW? framework to safeguard our CIIs. Enable a coordinated approach to national cybersecurity with CIIs at its core While we continue to strengthen these areas, Strategy 2021 also seeks to: To ensure our essential services are well-protected In Strategy 2016, the Government focused on strengthening the cyber resilience of our CIIs. The Cybersecurity Act was passed in 2018 and serves as the legislative from cybersecurity threats, we will evolve our policy approach to defend against sophisticated Leverage synergies across the nation This includes strengthening our technical capabilities and enhancing coordination across the Government in order to act with greater effectiveness, speed, and agility. threat actors. We must also continue to strengthen capabilities to protect, detect, respond, and recover from malicious cyber activities. We will also ensure that cyber-physical risks are well managed. Broaden our scope of protection beyond CIIs We want to strengthen the cybersecurity posture of other key entities whose compromise or disruption have significant knock-on effects to the wider economy and society. Address growing cyber-physical risks As the physical and digital worlds continue to converge, we want to ensure our policy and legislative frameworks remain fit-for-purpose to manage cyber-physical risks. Evolve our policy approach to defend against sophisticated threat actors Strengthen capabilities to protect, detect, respond, and recover from malicious cyber activities The Government will implement a layered Cybersecurity is enabled by strong and coordinated approach to national cyber capabilities. The Government will strengthen defence. CII owners will be encouraged to our technical capabilities to detect and adopt a zero-trust cybersecurity posture analyse malicious cyber activities to better for critical systems. For other services and defend against such threats. This includes infrastructure whose disruption could have the development of a Cyber Fusion Platform significant knock-on effects on the nation, that will allow the Government to conduct a risk-based approach will be adopted investigation with enhanced speed and The Government will work closely with CII owners, the cybersecurity industry to strengthen the cybersecurity of these efficiency. To strengthen our response and and key digital infrastructure owners to enable a coordinated approach to systems. For example, CSA is developing recovery, the Government will also implement a CII Supply Chain Programme to provide initiatives such as the new National Cyber recommendations for all stakeholders to Security Command Centre. We will also work manage cybersecurity risks in the supply with CII owners and other organisations to chain. In addition, we also seek to change address the various people, process, and mindsets, such that cybersecurity will be technology challenges in cybersecurity. national cybersecurity. We will also ensure that government systems providing key services for our citizens are secure and resilient. The Government will also look beyond CIIs and work towards safeguarding other entities and systems that provide important services that support our digital economy and way of life. viewed as an enterprise risk management issue, as opposed to a compliance issue. 15 The Singapore Cybersecurity Strategy 2021 16