CSOC Singapore Cybersecurity Act and PDPA

Question 1

Which Singapore government agency is responsible for overseeing cybersecurity under the Cybersecurity Act?

Accepted Answer

The Cyber Security Agency of Singapore (CSA)

Answer

The Infocomm Media Development Authority (IMDA)

Answer

The Ministry of Home Affairs (MHA)

Answer

The Singapore Police Force Cyber Crime Command

Question 2

What is a Critical Information Infrastructure (CII) under Singapore's Cybersecurity Act?

Accepted Answer

A computer or computer system that supports essential services whose disruption would have a serious impact on Singapore

Answer

Any IT infrastructure owned by the Singapore government

Answer

All internet service provider infrastructure in Singapore

Answer

Computer systems used by the Singapore Armed Forces for national defence

Question 3

Under Singapore's Cybersecurity Act, what is the obligation of a CII owner when a cybersecurity incident occurs?

Accepted Answer

The CII owner must notify CSA of the incident within the prescribed timeframe

Answer

The CII owner must resolve the incident independently without involving external parties

Answer

The CII owner only needs to report incidents if data loss has occurred

Answer

CII owners have no mandatory reporting obligation — reporting is voluntary

Question 4

What powers does the Commissioner of Cybersecurity have under Singapore's Cybersecurity Act?

Accepted Answer

Powers to investigate cybersecurity threats, require assistance from owners of computers, and authorise entry into premises during investigations

Answer

Powers to arrest and prosecute cybercriminals directly without police involvement

Answer

Powers to revoke all operating licences of companies that suffer cybersecurity breaches

Answer

Powers to mandate specific technology vendors for CII systems

Question 5

Under Singapore's Cybersecurity Act, which of the following is an offence?

Accepted Answer

Providing false information to the Commissioner of Cybersecurity during an investigation

Answer

Hiring an unregistered cybersecurity auditor for an internal review

Answer

Using open-source security tools without a vendor support agreement

Answer

Failing to achieve a specific cybersecurity certification within a defined timeframe

Question 6

How does the Singapore Cybersecurity Act interact with other sector-specific regulations in Singapore?

Accepted Answer

The Cybersecurity Act provides overarching cybersecurity requirements, while sector regulators such as MAS and MOH apply additional sector-specific cybersecurity rules

Answer

The Cybersecurity Act replaces all other sector-specific regulations for organisations that handle digital data

Answer

Only the Cybersecurity Act applies — sector regulators have no authority over cybersecurity matters

Answer

Sector regulators may override Cybersecurity Act requirements if they conflict with industry needs