Mixed Deck — All CSOC Topics Flashcards

What are the employer's obligations regarding PPE maintenance on Singapore construction sites?

Answer: Employers must ensure PPE is regularly inspected, cleaned, maintained, and replaced when necessary

Employers must implement a PPE maintenance programme including regular inspection, proper cleaning and storage, timely replacement of worn or damaged items, and record-keeping of PPE issuance.

In scaffolding terminology, what is a 'standard'?

Answer: A vertical tube that carries the weight of the scaffold to the ground

Standards are the vertical poles or tubes that carry the combined load of the scaffold, workers, and materials down to the base plates and ground.

What is the main purpose of Singapore's Personal Data Protection Act (PDPA)?

Answer: To govern the collection, use, disclosure, and care of personal data by organisations in Singapore to protect individuals' privacy

The PDPA establishes a data protection framework governing how organisations in Singapore collect, use, disclose, and protect personal data. It balances individuals' right to privacy with organisations' need to use data for legitimate business purposes.

What does a vulnerability scanner do in a cybersecurity context?

Answer: It automatically scans systems and networks to identify known vulnerabilities, misconfigurations, and security weaknesses

A vulnerability scanner probes systems and networks against a database of known vulnerabilities and common misconfigurations, producing a report of identified weaknesses for security teams to review and prioritise for remediation.

What type of safety footwear is required on Singapore construction sites?

Answer: Safety boots or shoes with steel toe caps and puncture-resistant soles that meet approved standards

Construction site footwear must have steel or composite toe caps to protect against falling objects and puncture-resistant soles to protect against nails and sharp objects on the ground.

What is the difference between a security event and a security incident?

Answer: A security event is any observable occurrence; a security incident is an event that adversely affects security or violates a security policy

A security event is any observable occurrence in a system or network that may or may not be malicious. A security incident is a confirmed event that has actually violated security policies, caused harm, or required a formal response.

What is the 'kill chain' framework in cybersecurity operations?

Answer: A model describing the stages of a cyber attack from reconnaissance through to data exfiltration, used to understand and disrupt attacks at each stage

The cyber kill chain describes the sequential stages of a cyber attack: reconnaissance, weaponisation, delivery, exploitation, installation, command and control, and actions on objectives. Understanding the kill chain helps defenders identify opportunities to detect and disrupt attacks at each stage.

What is the minimum required height of a toe board fitted on a scaffold platform?

Answer: 150mm

Toe boards must be at least 150mm high to prevent tools, materials, and debris from rolling or sliding off the scaffold platform edge.

What must occur after any repair or alteration is made to an existing scaffold structure?

Answer: The altered scaffold must be re-inspected by a competent person before anyone uses it

Any repair or alteration may affect the structural integrity of the entire scaffold, so a full re-inspection by a competent person is mandatory before the scaffold is returned to use.

By whom must a permit-to-work for scaffold erection be issued in Singapore?

Answer: A competent person authorized by the site occupier

Singapore WSH regulations require that the permit-to-work for scaffold erection or dismantling be issued by a competent person who is authorized by the occupier of the workplace.

What is the purpose of packet capture (PCAP) in network security investigations?

Answer: To capture and record the full content of network packets for detailed forensic analysis of security incidents

Packet capture records the full content of network traffic, providing the most detailed possible evidence for forensic investigations. PCAP data can reveal exactly what data was transmitted, which protocols were used, and what commands were sent by attackers.

What are the potential consequences for an organisation in Singapore that fails to comply with the PDPA?

Answer: Financial penalties up to S$1 million or 10% of annual local turnover for larger organisations, directions to stop non-compliant practices, and reputational damage

PDPC can impose financial penalties of up to S$1 million, or 10% of annual local turnover for organisations above a threshold. It can also issue directions to stop non-compliant practices, require corrective measures, and publish enforcement decisions.

What is 'shift handover' in a 24/7 CSOC and what information should it include?

Answer: The structured transfer of situational awareness between outgoing and incoming shift teams, covering active incidents, monitoring status, and any pending actions

Shift handover ensures continuity in a 24/7 CSOC. The outgoing team briefs the incoming team on active incidents, ongoing investigations, any changes to the environment, and pending tasks, so there is no gap in situational awareness.

What lighting requirements apply to Singapore construction sites during work hours?

Answer: Adequate artificial lighting must be provided in all work areas, access routes, and common areas where natural light is insufficient

Under WSH regulations, all work areas and access routes must be adequately lit to enable safe work and movement. This includes stairways, corridors, and any enclosed or underground areas.

What is the function of putlogs or transoms in a scaffold structure?

Answer: To support the scaffold planks forming the working platform

Putlogs and transoms are horizontal members that span across the scaffold to directly support the planks or boards that form the working platform.

What atmospheric hazards can exist in deep excavations on Singapore construction sites?

Answer: Oxygen deficiency, toxic gases (hydrogen sulphide, methane), and carbon dioxide accumulation, especially in poorly ventilated excavations

Deep excavations can accumulate toxic gases from decomposing organic matter, sewage pipes, or contaminated soil. Oxygen levels can drop dangerously. Gas monitoring and ventilation are essential.

What is the main structural purpose of diagonal bracing in a scaffold frame?

Answer: To prevent lateral sway and maintain the scaffold's structural rigidity

Diagonal bracing resists lateral forces such as wind load and accidental impacts, preventing the scaffold from swaying, racking, or collapsing sideways.

What is the Common Vulnerability Scoring System (CVSS) used for?

Answer: To provide a standardised numerical score indicating the severity of a cybersecurity vulnerability

CVSS provides a standardised scoring system that rates the severity of vulnerabilities on a scale from 0 to 10, considering factors such as exploitability, impact, and the environment. It helps organisations prioritise which vulnerabilities to remediate first.

What are the welfare facilities required on Singapore construction sites?

Answer: Adequate toilets, clean drinking water, rest areas, and washing facilities must be provided for all workers

Under the WSH (Construction) Regulations, employers must provide adequate sanitary facilities, clean drinking water, rest shelters (especially important in Singapore's heat), and washing facilities.

What is 'lateral movement' in the context of a cyber attack?

Answer: The technique used by an attacker to progressively move through a compromised network to reach high-value targets

Lateral movement describes how an attacker, after gaining initial access, navigates through a network to reach additional systems, escalate privileges, and access valuable assets. It is a key phase in many advanced persistent threat (APT) campaigns.