Singapore: Implemented Cybersecurity Act 2018 including provisions governing Cybersecurity Service Providers (CSP)

On 11 April 2022, part 5 and the second Schedule of the Cybersecurity Act were implemented, establishing a framework for the protection of critical information infrastructure (CII) against cybersecurity threats. Part 5 of the Act establishes the licensing framework for Cybersecurity Service Providers (CSP) in Singapore and makes it illegal to offer or advertise licensable cybersecurity services without a license. Applications for licenses can be denied if the applicant is unfit or poses a security risk. The licensing officer can impose conditions on licenses and take disciplinary actions, including revoking or suspending licenses.