On 5 February 2018, the Cybersecurity Bill was passed by
Parliament. A draft version of this bill (Draft
Bill) had previously been issued for public consultation
by the Ministry of Communications and Information
(MCI) and the Cyber Security Agency of Singapore
(CSA) on 10 July 2017. The Draft Bill was
subsequently revised to take into account feedback gathered during
this consultation exercise. For an overview of the key requirements
of the Draft Bill, please refer to our earlier update. This update
focuses on the amendments that have since found their way into the
Cybersecurity Act as passed by Parliament.
The Cybersecurity Act addresses quite a number of concerns
raised during the public consultation exercise. For instance, our
previous update questioned the definition of "significant
cybersecurity incidents" which need to be reported, the
technical standards expected to be maintained in the Draft Bill,
and raised queries relating to when notifications on change