Owners of critical information infrastructure (CII), such as those providing water, electricity and banking services, will be required to report more types of cybersecurity incidents, including those that happen in their supply chains, under a new proposed law.
Tabled in parliament on April 3, the Cybersecurity (Amendment) Bill will update existing provisions relating to the cybersecurity of CII as well as expand CSA's oversight to cover Systems of Temporary Cybersecurity Concern or STCCs.
The objective of the Bill, which would amend the Act for the first time, is to ensure that the law keeps pace with developments in the cyber threat landscape, as well as Singapore's evolving technologies operations, said CSA in a media release on Wednesday.
A key aspect of the Bill is also to ensure that CII owners remain responsible for the cybersecurity and cyber resilience of the systems, while embracing new technological and business models such as cloud computing, said CSA.
Minister for Communications and Information Josephine Teo said that the law needed to change to reflect the increasing importance of ensuring the cybersecurity of the digital infrastructure and services that power Singapore's digital economy, as well as allow citizens to meet their day-to-day needs.
What the Bills covers?
At present, CII owners are only required to report cybersecurity incidents concerning the critical infrastructure, and computer systems under their control that are interconnected or communicate with the infrastructure. If the new law is passed, owners will also have to report incidents targeting systems that are peripheral to CII.
The Bill will also allow CSA to proactively secure STCCs to ensure the cybersecurity of these systems.
Lastly, the Bill also requires companies such as cloud service providers and data centres to be responsible for the cybersecurity of such digital infrastructure.
CSA added that it had consulted extensively on the Bill, through stakeholders and public consultations. If passed, the agency said it will continue to consult closely with stakeholders to operationalize the Bill.
For any enquiries, give us a call at 6262 0402 or email us at care@acebizservices.com
Comments