Certification for the Cyber Essentials mark

Organisations seeking certification may refer to the following:
(Note: Documents were last updated in August 2022)

The Cyber Essentials mark is published as Technical Reference 106 (TR 106) under the Singapore Standardisation Programme. Organisations may obtain a copy of TR 106:2022 “Tiered cybersecurity standards for enterprises” from the Singapore Standards e-shop.

(As part of World Standards Day, the launch of the TR, the Singapore Standards e-shop is offering a 25% discount till 30 November 2022.)

a. Certified Organisations

The directory of certified organisations can be found here (373KB).

Small and Medium Enterprises (SMEs) that are certified are also eligible to apply for the SME Cybersecurity Excellence award that CSA is collaborating with Association of Trade & Commerce (ATC) on.

b. Appointed Certification Bodies

The certification process is undertaken by certification bodies that have been appointed by CSA. Organisations may approach any of the certification bodies, please click here for contact details.

c. Certification Duration and Mode of Assessment

The Cyber Essentials certification is valid for a duration of 2 years. The mode of assessment will involve desktop review and verification of the organisation’s self-assessment by an independent assessor from the appointed certification body.

Certification charges and the time needed for certification may differ according to the scope of the certification. Organisations may visit the websites of the certification bodies listed above to find out more.

d. Early bird incentive for the Cyber Essentials mark certification

To encourage organisations to adopt the Cyber Essentials mark, CSA has worked with the appointed certification bodies to offer an early bird incentive for a limited time period. Organisations that are successfully certified can enjoy the following incentives, which will be deducted from the certification fees charged by the certification bodies:

* The following considerations applies to the early bird incentive:

• Applicable only from 29 Mar 2022 to 31 Mar 2023
• Applicable only for the first successful certification per organisation
• Only Singapore-registered businesses and Non-Profit Organisations (NPO) incorporated in Singapore are eligible
• For the early bird incentive, organisations shall submit their completed application forms to their selected certification bodies

Organisations that are members of the National Council of Social Services (NCSS) are also eligible for subsidies from NCSS under the Tech-and-GO! consultancy programme.

e. Cybersecurity toolkits and guidance to support certification

Need help with the cybersecurity measures you can implement to improve your organisation’s cybersecurity? Check out our cybersecurity toolkits for guiding questions, templates and more.

f. Cybersecurity solutions to address measures in Cyber Essentials mark

Ready to start your digital journey but in doubt of which products or solutions to use? The following products or solutions can help you get started in your cybersecurity certification journey. They address, either in part, or more comprehensively, the measures listed in the Cyber Essentials mark.*

Select appropriate options from the provider listing of solutions that complement Cyber Essentials mark.

Added Benefit For Certified Organisations 

Cyber Essentials certified organisations are eligible for discounted rates when they apply for cyber insurance with the following:

• QBE Insurance (Singapore) Pte Ltd 
  

Please contact the companies listed for details.