Critical system operators will soon be required to report advanced cyber attacks

Operators of critical systems, such as those that manage Singapore's energy, water and transportation services, will be required to report suspected advanced persistent threat (APT) attacks.

- Sarah Koh

Mandatory reporting to the Republic's cyber-security watchdog, the Cyber Security Agency of Singapore (CSA), is expected to take effect later in 2025, said Minister for Digital Development and Information Josephine Teo on July 29.

The new measure under the Cybersecurity Act comes after the revelation on July 18 of serious threats from the cyber-espionage group UNC3886, which experts said is linked to China.

It is one of several APT actors, whose activities have increased more than fourfold from 2021 to 2024, that target Singapore's critical information infrastructure (CII).

"If organisations suspect that they have been targeted, they cannot and should not confront the attackers on their own," said Mrs Teo at the fifth annual Operational Technology Cybersecurity Expert Panel forum organised by CSA.

"These requirements will support the early detection of APT activities, and enable CSA to take more timely actions together with other government agencies to defend CII owners against the attacks."