CSOC Singapore Cybersecurity Act and PDPA

Question 1

Which Singapore government agency is responsible for overseeing cybersecurity under the Cybersecurity Act?

Accepted Answer

The Cyber Security Agency of Singapore (CSA)

Answer

The Cyber Security Agency of Singapore (CSA) is the national agency overseeing cybersecurity in Singapore. Under the Cybersecurity Act, CSA has powers to regulate critical information infrastructure, respond to cyber incidents, and promote cybersecurity across sectors.

Question 2

What is a Critical Information Infrastructure (CII) under Singapore's Cybersecurity Act?

Accepted Answer

A computer or computer system that supports essential services whose disruption would have a serious impact on Singapore

Answer

Under the Cybersecurity Act, a CII is a computer or system that forms part of an essential service (e.g., energy, water, banking, healthcare, transport) whose disruption would significantly impact Singapore's national security, economy, or public safety.

Question 3

Under Singapore's Cybersecurity Act, what is the obligation of a CII owner when a cybersecurity incident occurs?

Accepted Answer

The CII owner must notify CSA of the incident within the prescribed timeframe

Answer

The Cybersecurity Act imposes mandatory incident reporting obligations on CII owners. They must notify CSA of specified cybersecurity incidents within prescribed timeframes so that CSA can coordinate national-level response if necessary.

Question 4

What powers does the Commissioner of Cybersecurity have under Singapore's Cybersecurity Act?

Accepted Answer

Powers to investigate cybersecurity threats, require assistance from owners of computers, and authorise entry into premises during investigations

Answer

The Commissioner of Cybersecurity has extensive investigative powers under the Act, including the ability to investigate cyber threats, require computer owners to provide assistance, and enter premises during investigations, subject to legal safeguards.

Question 5

Under Singapore's Cybersecurity Act, which of the following is an offence?

Accepted Answer

Providing false information to the Commissioner of Cybersecurity during an investigation

Answer

Providing false information to the Commissioner of Cybersecurity during an investigation is a criminal offence under the Cybersecurity Act. The Act also creates other offences related to obstruction of investigations and unauthorised access.

CSOC Practice Test

CSOC Practice Test

CSOC Singapore Cybersecurity Act and PDPA