Cyber threats now range from complex ones caused by future quantum computers that could break today’s encryption, to everyday phishing scams targeting small and medium-sized enterprises (SMEs).
After launching its updated cybersecurity strategy, Singapore announced four new measures at the Singapore International Cyber Week (SICW) event happening from October 13 to 15 to put that new plan to work.
Moving in several fronts at once, the Cyber Security Agency of Singapore (CSA)’s announcements ranged from quantum-safe deadlines, a one-stop hotline to provide first-response help for businesses, accreditation for cybersecurity professionals, to more funding for regional capacity building.
1. Deadlines and new grant for CIIs to move to quantum-safe systems
To protect against attacks from future quantum computers, critical information infrastructure (CII) owners and other organisations vulnerable to quantum threats are expected to complete the move to quantum-safe systems by 2031 and 2035.
Vulnerable organisations include those that hold sensitive, highly confidential information, as well as those providing important services like communications and digital transactions.
Noted in CSA’s official release, upgrading security for the quantum era takes time, building encryption into applications, networks and infrastructure across multiple vendors.
The transition time is needed to assess risks, test fixes and roll out changes without disrupting services.
To support this transition, CSA has launched the Quantum Safe Kickstarter Grant from this November 1 to October 31, 2027, to support organisations to pilot quantum-safe solutions.
Priority is given to CII owners, and to tackle common migration challenges.
To support more broadly the organisations that depend on digital systems in their operations to move towards quantum-safe systems, CSA has issued a new advisory, as well as practical guidance and a self-assessment tool co-developed by CSA, Infocomm Media Development Authority (IMDA), and GovTech Singapore.
CII owners are advised to refer to the CSA’s guidance issued in June 2026, laying out the key milestones to achieve before the 2031 timeline.
2. One-stop hotline targeting timely response among organisations
Singapore businesses could now reach out to the Cyber Incident Helpline (CIH) at 6890 9555, or visit www.cyberresilience.sg, to receive practical first-response support and containment guidance when cyber incidents occur.
Screenshot from www.cyberresilience.sg.
According to the release, the hotline supports businesses of all sizes and covers a wide range of attacks from phishing and social engineering attacks, business email compromise, malware infections, ransomware incidents, suspected data breaches and more.
Where specialist assistance is needed, the hotline operator would refer the business to a list of pre-approved cybersecurity partners.
The hotline is run by the Cyber Resilience Centre (CRC) operated by the Singapore Business Federation (SBF) partnering with other trade associations, and supported by CSA.
CSA’s survey of Singapore’s cyber landscape in 2025 reported a lack of capacity and awareness among businesses to prevent and tackle cyber threats, especially among SMEs.
Also, despite the increased prevalence of cybersecurity incidents, there were relatively fewer reports (compared to 2023) submitted by businesses on the incident response costs incurred.
3. National accreditation framework for cybersecurity professionals
CSA plans to launch a voluntary accreditation pilot from the second quarter of 2027 that will involve cybersecurity professionals from selected government agencies and cybersecurity service providers.
For Singapore’s cybersecurity professionals, more information about the accreditation process will be available on CSA’s website from March 2027 onwards.
As a first step towards accreditation, CSA will work with IMDA and the Skills and Workforce Development Agency (SWDA) to develop a competency framework to set out the standards for each type of cybersecurity role.
This framework will cover technical knowledge, practical experience and professional ethics.
To avoid overlap with existing frameworks for IT professionals, CSA will also refresh and align the cybersecurity track under the Skills Framework for Infocomm Technology (SFw for ICT) developed by IMDA and SWDA and CSA’s own Operational Technology Cybersecurity Competency Framework (OTCCF).
By the end of this year, CSA plans to set up:
The Cyber Security Professional Office (CSPO) with the Association of Information Security Professionals (AiSP) to manage the accreditation process;
A Cyber Security Professional Panel (CSPP) comprising members from government, industry and academia to guide the development of professional standards; and
Accreditation committees involving leading technical experts in cybersecurity to periodically review the standards and assessment criteria to keep relevant.
The need for accreditation resulted from a study that CSA has commissioned an external consultancy company to do.
The study found that the cybersecurity sector’s wide range of certifications makes it challenging for employers to assess competencies, and for professionals themselves to identify and upkeep their skills needed for their roles.
Additionally, existing certifications do not holistically cover technical knowledge, practical experience and professional ethics.
The study highlighted that about 67 per cent of stakeholders surveyed were ready for an accreditation framework.
4. Singapore government’s additional funding for regional cyber defence
Over the next five years, Singapore will commit S$30 million (US$23 million) through the Asean Cybersecurity Centre of Excellence (ASCCE) to build cybersecurity capabilities and strengthen cooperation across Southeast Asia.
11th ASEAN Ministerial Conference on Cybersecurity (AMCC) at SICW 2026. Image: SICW’s LinkedIn
Set up in 2019, the ASCCE runs programmes on cyber policy, technical and operational training for computer emergency response teams (CERTs), international law, and national cyber leadership.
The funds will be released in stages, with priority given to cyber incident response, protecting CII, artificial intelligence (AI)-related cybersecurity risks and cyber diplomacy.
The release noted that as ASEAN’s digital economies become more interconnected, cybersecurity is a shared regional concern, since threats cross borders and disruptions can spread beyond a single organisation or country.
——————————————————-
Click Here For The Original Source.
