What is Cybersecurity, and what it means for Singapore?
Cybersecurity is the protection of our digital networks, systems and information from misuse, failures, and attacks. Digital systems are defined as IT (Information Technology) – the network of computers used to manage our digital data and information; and the OT (Operational Technology) system of hardware and software that control all the physical equipment, machinery, and infrastructure to ensure they operate safely and continuously.
The Singapore Context
Singapore relies on the uninterrupted flow of information to facilitate the international movement of finance, goods and people. Any disruption will lead to physical inconveniences and consequential financial impact to Singapore and globally. As we deploy new technologies in data digitalisation, AI automation, quantum computing, and autonomous transportation, the risks will only increase.
Regulatory Safeguards
Accordingly, Singapore’s laws are regularly updated to safeguard against cyber-attacks. A company (or its system) can be designated as a Critical Information Infrastructure (CII) by the Cyber Security Agency (CSA).
Example: The Health Information Bill passed in Jan 2026 makes it mandatory for all licensed healthcare providers to share data with the National Electronic Health Record (NEHR). Unauthorized access to the NEHR is a criminal offense with fines up to S$100,000 or jail time.
The CSA is reviewing to extend these cyber defence obligations to non‑CII companies whose systems connect to or interact with the CII through sector-specific tightening of requirements.
Singapore PDPA
For all other private‑sector organisations, the PDPA sets the baseline for data‑protection duties. Depending on the sector, Acts and Bills are tightening the cybersecurity requirements in support of digitalisation. Following a breach, companies may face regulatory penalties, the revoke of licences, and legal liabilities if no preventive measures were put in place.