Singapore

Cybersecurity Act 2018 serves as the most important legislative framework implemented by the Parliament of Singapore under the guidance of the Cyber Security Agency of Singapore (CSA) to enhance cyber resilience and secure Critical Information Infrastructure (CII) in nine vital sectors. The Cybersecurity Act came into force on 31 August 2018 and includes provisions relating to CII management, the Commissioner of Cybersecurity investigation power, public-private partnership for sharing threat intelligence and creation of licensing scheme for cybersecurity products/services such as penetration testing offered by private organizations. However, to meet the changing dynamics of cloud-based computing and digital supply chain systems, an important legislative amendment was formally adopted on 31 October 2025, wherein the scope of the Act has been expanded to include any virtual systems, third-party cloud service providers, and overseas-hosted infrastructure affecting local operations. With follow-up implementation policies such as the Cybersecurity Code of Practice of 2026, the Act requires strict compliance and security audit measures to secure Singapore's digital economy from advanced cyber challenges.