On 11 April 2022, The Cyber Security Agency of Singapore
announced the launch of a licensing framework for providers of the
following cybersecurity services
(“LCS”):
- managed security operations centre monitoring service; and
- penetration testing service.
Under the new framework, cybersecurity service providers
(“CSPs”) who are already engaged in
the business of providing either or both of the LCSs are given
until 11 October 2022 to apply for a licence with the Cybersecurity
Services Regulation Office (“CSRO”) to
continue providing LCS after 11 October 2022. Pursuant to the new
framework, Part 5 and the Second Schedule to the Cybersecurity Act
of 2018 will both come into effect.