Singapore: Cyber Trust Mark requirements in critical information infrastructure and cybersecurity industries
Progress
Scope
Timeline of events
Obligation for owners of critical information infrastructure to obtain Cyber Trust Mark Level 5 certification enters into force
On 31 December 2027, the window for compliance with the Cyber Security Agency (CSA) obligation directing Critical Information Infrastructure Owners (CIIOs) to have obtained the Cyber Trust Mark (CTM) Level 5 certification for non-CII systems ends. T…
SourceObligation for auditors of critical information infrastructure to obtain Cyber Trust Mark Level 5 certification enters into force
On 31 December 2026, the window for compliance with the Cyber Security Agency (CSA) obligation directing Critical Information Infrastructure Auditors to have obtained the Cyber Trust Mark (CTM) Level 5 certification ends. This mandate, announced dur…
SourceCyber Security Agency adopted obligation for owners and auditors of critical information infrastructure to obtain Cyber Trust Mark Level 5 certification
On 2 March 2026, the Cyber Security Agency (CSA) adopted a requirement for Critical Information Infrastructure Owners (CIIOs) and CII auditors to obtain the Cyber Trust Mark (CTM) Level 5 certification. The mandate aims to establish a consistent nat…
Source