Contractor Data Leaks In Singapore: A Holistic Approach Towards Risk Mitigation

With the dramatic increase of cyber threats during the pandemic*, multiple data leaks were reported by major internet service providers and various government agencies within the span of a year. When examining the details of the breaches, it is evident that many of them occurred on the end of external vendors, which were targeted and exploited by attackers.

Outsourcing in the field of IT and cybersecurity is commonplace, as few companies have the resources and manpower to handle these aspects in-house. What should companies take note of in outsourcing arrangements where work involving the storage or processing of personal data is conducted by an external vendor?