CSA LAUNCHES NEW CYBERSECURITY CERTIFICATION PROGRAMME TO RECOGNISE ENTERPRISES WITH GOOD CYBERSECURITY PRACTICES
The Cyber Security Agency of Singapore (CSA) today launched a new cybersecurity certification programme to recognise enterprises that have adopted and implemented good cybersecurity practices. The certification programme comprises two cybersecurity marks: Cyber Essentials recognises enterprises that have put in place cyber hygiene measures, while Cyber Trust is a mark of distinction to recognise enterprises with comprehensive cybersecurity measures and practices. Mr Tan Kiat How, Minister of State for Communications and Information, announced the launch of the certification programme this afternoon at Marina Bay Sands Convention Centre.
2 Cyber Essentials is targeted at Small and Medium Enterprises (SMEs) - which tend to have limited IT and/or cybersecurity expertise and resources – and helps them prioritise the baseline cybersecurity measures needed to safeguard their systems and operations from common cyber-attacks. Cyber Trust, on the other hand, is targeted at larger or more digitalised enterprises - such as Multinational Corporations (MNCs) – as these enterprises are likely to have higher risk levels which require them to invest in significant expertise and resources to manage and protect their IT infrastructure and systems. The marks do not certify the cybersecurity of specific products or services, but rather, they certify the cybersecurity measures adopted at the organisation level. Please refer to the factsheet in Annex A for more information on Cyber Essentials and Cyber Trust.
3 CSA developed these marks in consultation with industry partners such as certification practitioners, technology providers and trade associations, taking into consideration the diverse organisational profiles and operational needs of enterprises in Singapore. CSA worked with various companies to pilot the framework for the Cyber Trust and Essentials. These companies – from a myriad of sectors - include Andersen’s of Denmark Ice Cream, CrimsonLogic, IBM, Kestrel Aero and Lazada Singapore. CSA worked with these partners to “road-test” the certification requirements and provide feedback to CSA on the certification process. Please refer to Annex B for Quotes from the pilot users.
4 For a start, CSA has appointed eight independent certification bodies for enterprises applying for either Cyber Essentials or Cyber Trust. While these marks are not mandatory, CSA will work with its industry partners, such as Trade Associations and Chambers (TACs), to encourage their adoption.
