Legislation / ActAsia-Pacific · Singapore

Singapore Cybersecurity Act (as amended 2024) (SG Cybersecurity Act)

Oversight of national cybersecurity and critical/foundational digital infrastructure.

Verify current status

Confirm commencement of specific 2024 amendment provisions and subsidiary legislation on the CSA / Singapore Statutes sites.

Classification

Legislation / Act

Issuing authority

Cyber Security Agency of Singapore (CSA)

Jurisdiction

Asia-Pacific · Singapore · Sector: Critical infrastructure / digital infrastructure

Status / edition

In force; amended 2024

Key dates

Cybersecurity Act 2018; Amendment Act (No. 15 of 2024) passed 7 May 2024

Mandatory or voluntary

Mandatory (sector-specific)

Who it applies to

Critical Information Infrastructure (CII) owners; the 2024 amendments extend oversight to further digital infrastructure and entities of special concern.

Purpose

Oversight of national cybersecurity and critical/foundational digital infrastructure.

Major requirements / obligations

  • CII duties and incident reporting
  • Expanded scope (FDI, STCC, ESCI)
  • Licensing of certain cybersecurity services

Control domains

GovernanceIncident responseRisk assessment

Official reference

Last reviewed

2026-10-18 (source verification date)

This library provides general information for orientation only. It is not legal advice, a determination of applicability, or a substitute for formal certification or professional counsel. Verify current legal status, editions and dates against the official source before relying on any entry. Inclusion of a jurisdiction or instrument here is informational and does not imply that Srida IT provides regulated services, holds local authorisation, or has a presence in that jurisdiction.