CyberInsight Asia

Southeast Asia

Singapore

Last updated:

Status under re-verification · Last verified: 2026-10-05

CyberInsight Asia assessment Seed score

Risk score
~28
Country risk level
Low
U.S. coercion and market-exclusion risk
Medium
Maturity
78CMM level: Level 4 Managed · Mature
Composite risk index
0.36Controllable
Quadrant
Benchmark
Last verified

Scores and risk labels are our own assessment, based on public sources as of the date shown. They are opinions, not findings or statements of fact about any government, organisation or group.

Scores start from a seeded CyberInsight assessment and move as new evidence is recorded. A dimension with no new evidence keeps its last valid contribution.

These dimensions have no evidence yet and are held unchanged: Critical-infrastructure exposure, Regulatory enforcement capability (inverse), Enterprise practice, Geopolitics and great-power risk, Historical incident severity, International cooperation, Laws and regulations, Regulatory capability, Strategy, Threat activity

automated calibration: not run · See the Methodology page for how scores are produced

Trend

A trend needs at least two monthly points; there is only one so far.

Automated coverage

Limited automated coverage

  • Automated coverage is limited: some official sources cannot currently be read, so the content below may be incomplete.
  • Last run (2026-10-12): 4 of 7 tier-1 sources readable.
  • Register areas only partly verified: personal data, cybercrime, regulator
  • Register areas not yet verified: cross-border data, telecom security, finance sector rules, telecom sector rules

This means some official sources cannot currently be read automatically, so this page may be incomplete. It does not mean the related laws or events do not exist.

Threat landscape

Threat items are not yet attributed to this jurisdiction.

Industry focus

Industry focus will be generated once sourced material exists.

Compliance points

personal data

Verification state: Partly verified

critical infrastructure

Verification state: Verified

  • Cybersecurity Act
    Cybersecurity Act: in force, As of 2026-10-12 · Source
  • Cybersecurity (Amendment) Act 2024
    Cybersecurity (Amendment) Act 2024: partly in force, As of 2026-10-12 · Source
  • Cybersecurity Code of Practice for Critical Information Infrastructure 2026
    Cybersecurity Code of Practice for Critical Information Infrastructure 2026 (The Cybersecurity Code of Practice for Critical Information Infrastructure 2026): Code of practice, As of 2026-10-12 · Source

incident reporting

Verification state: Verified

  • Cybersecurity (Amendment) Act 2024
    Cybersecurity (Amendment) Act 2024: partly in force, As of 2026-10-12 · Source
  • Guide on Managing and Notifying Data Breaches under the Personal Data Protection Act
    Status under re-verification · Last verified: 2026-10-05 · Source

cybercrime

Verification state: Partly verified

  • Computer Misuse Act 1993
    Computer Misuse Act 1993: in force, As of 2026-10-12 · Source
  • Criminal Law (Miscellaneous Amendments) Act 2025
    Criminal Law (Miscellaneous Amendments) Act 2025 (Criminal Law (Miscellaneous Amendments) Act 2025 (No. 21 of 2025)): enacted, not yet in force, As of 2026-10-12 · Source

regulator

Verification state: Partly verified

No record can be shown from the Law Register yet.

Notes for ICT equipment suppliers

This section is based on publicly available sources only.

Suggested checks

Latest updates

No recent updates yet.