Why will Singapore mandate APT attack reporting for critical infrastructure?

Question

Accepted Answer

Singapore Mandates APT Attack Reporting for Critical Infrastructure Amid Rising Threats

Singapore will require operators of critical infrastructure to report suspected advanced persistent threat (APT) attacks as part of amendments to the Cybersecurity Act. This new mandate, expected to be in effect by late 2025, aims to enhance early detection and enable swifter responses to sophisticated cyber threats targeting the nation's essential services. The move comes in light of a significant increase in APT activities against Singapore's critical systems and follows the disclosure of state-linked cyber-espionage campaigns.
Increased Sophistication and Frequency of APT Attacks

The decision to mandate reporting stems from a substantial rise in APT actors targeting Singapore's critical infrastructure. Between 2021 and 2024, the frequency of such attacks surged by more than fourfold. This escalation highlights the growing threat posed by well-resourced, often state-sponsored groups that employ stealthy methods to infiltrate high-value networks for data theft or service disruption. This marks the first time Singapore has publicly acknowledged specific APT threats, with Minister Josephine Teo citing recent global incidents involving attacks on energy and water systems as examples of the real dangers.
Strengthening Early Detection and Response Capabilities

The new reporting requirement is designed to bolster Singapore's ability to detect and counter APT activities more effectively. By mandating that organisations report suspected targeting, the Cyber Security Agency of Singapore (CSA) will gain crucial intelligence for early detection. This will allow CSA, in conjunction with other government agencies, to take more timely and coordinated actions to defend critical information infrastructure (CII) owners. Previously, CII operators were required to report direct attacks, but the amendments expand this to include disruptions arising from service providers or third parties.
Expanding the Scope of Cybersecurity Oversight

Beyond direct reporting of APT attacks, the amended Cybersecurity Act introduces broader changes to CSA's oversight. This includes extending its purview to temporary systems that support major events, such as those used for vaccine distribution or international summits. Furthermore, the Act was previously amended in 2024 to encompass cloud and supply chain risks, demonstrating a continuous effort to adapt regulations to evolving cyber threats. Singapore's 11 CII sectors, which include energy, water, land transport, healthcare, and government systems, will be directly impacted by these enhanced measures.
Collaborative Efforts to Enhance Operational Technology Security

In parallel with legislative changes, Singapore is actively fostering collaboration to strengthen cybersecurity, particularly for operational technology (OT) systems. The CSA has been increasing its cross-sectoral partnerships, including a recent memorandum of collaboration with ST Engineering to develop specialised cybersecurity tools for OT environments. These initiatives underscore a commitment to a partnership approach, involving both global and local entities, to share actionable threat intelligence and ensure a resilient digital future for the nation. The formation of a new OT-focused special interest group by ISACA is also seen as crucial for improving information sharing within the sector.

Reading history

Hide →

This history is cleared when the page is closed.

Why will Singapore mandate APT attack reporting for critical infrastructure?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

1

0

0

Share with friends