Cyber Security Agency

What Cyber Security Agency does

Cyber Security Agency of Singapore (CSA) is the national statutory authority for cybersecurity, established in 2015 under the Ministry of Digital Development and Information. CSA's core mission is to keep Singapore's cyberspace safe and secure, underpinning national security, powering a digital economy, and protecting the country's digital way of life. The agency coordinates whole-of-government and whole-of-nation cyber defence across 11 Critical Information Infrastructure sectors, including telecommunications, banking, healthcare, and energy, with regulatory powers under the Cybersecurity Act to oversee CII owners, conduct inspections, and mandate incident reporting.

CSA's product and service portfolio combines incident response, public tools, certification regimes, and talent development. Core services include the Singapore Cyber Emergency Response Team (SingCERT) for incident response, the Internet Hygiene Portal, the Cybersecurity Health Check Tool, the Password Checker, the Ransomware Portal (built with Singapore Police Force), and the Cyber Aid online reporting system. The Cybersecurity Labelling Scheme and the Cyber Trust Mark certification (mandatory for CII owners, auditors, and providers by end-2027) are its principal regulatory instruments. Talent development is delivered through the SG Cyber Talent umbrella, with sub-programmes for youth, olympians, associates, women, educators, and leaders, delivered in partnership with ISC2, SMU, ISTARI, and all five local polytechnics. CSA's business model is non-commercial: it is fully funded by the Singapore government, provides services at no direct cost to citizens and organisations, and is not revenue-generating. Its "customers" are statutory beneficiaries rather than paying accounts.

Name

Cyber Security Agency

Legal name

Cyber Security Agency of Singapore

Website

https://csa.gov.sg

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

251–500 employees

Short description

The Cyber Security Agency of Singapore (CSA) is the national statutory cybersecurity authority, established in 2015, coordinating cyber defence across 11 Critical Information Infrastructure sectors, delivering incident response, certification, and workforce development funded by the Singapore government.

Ownership category

akta.pro rank

Product category

National Cybersecurity Services

akta.pro primary industry

Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH)

Keywords

• National cybersecurity agency
• Incident response services
• Cybersecurity certification schemes
• Critical infrastructure protection
• Cybersecurity workforce development

Headquarters

HQ city

Singapore

HQ country

Singapore

HQ region

Asia

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Infrastructure, Marketing or Sales

Distribution channels4 records

Marketing channels8 records

Core offering

CSA is the national cybersecurity authority of Singapore and delivers incident response, critical infrastructure protection, cybersecurity certification and labelling, internet hygiene self-assessment tools, ransomware recovery resources, and national cybersecurity workforce development. Its core services include SingCERT incident response, the Internet Hygiene Portal, the Cybersecurity Labelling Scheme (with Cyber Trust Mark), the Ransomware Portal, and the SG Cyber Talent initiative, all provided to protect Singapore's cyberspace and regulated CII sectors.

Product overview

The Cyber Security Agency of Singapore (CSA) operates as Singapore's national cybersecurity authority, providing a portfolio of cybersecurity services, tools, and programmes rather than a commercial product company. Core services include SingCERT (incident response), the Internet Hygiene Portal (enterprise self-assessment), Cybersecurity Health Check Tool, Password Checker, and Ransomware Portal. CSA operates talent development programmes under SG Cyber Talent including SG Cyber Youth (with YCEP boot camps and SG Cyber Youth Odyssey), SG Cyber Olympians, SG Cyber Leaders, SG Cyber Associates, SG Cyber Women, and SG Cyber Educators. Advisory panels include the OTCEP and Cyber Security Awareness Alliance. CSA publishes annual Singapore Cyber Landscape reports and maintains policy frameworks including the Cybersecurity Strategy 2021 and Safer Cyberspace Masterplan 2020.

Differentiator

Problem solved

Functional benefit

Products and services

• SingCERT (Singapore Cyber Emergency Response Team) National incident response service that encourages reporting of cyber incidents, provides guidance and coordination for cybersecurity incidents affecting Singapore, and supports incident handling including the online Cyber Aid reporting system.
• Internet Hygiene Portal (IHP) One-stop platform for enterprises that provides access to resources and self-assessment tools to adopt internet security best practices in their digitalisation journey. The portal also hosts the Password Checker and links to the Cybersecurity Health Check Tool.
• Ransomware Portal One-stop portal developed by the Singapore Police Force in collaboration with CSA for organisations to access key ransomware-related resources and recovery support.
• Cybersecurity Labelling Scheme (CLS) Certification and labelling scheme for cybersecurity products and services, covering consumer devices and enterprise-grade cybersecurity providers; includes the Cyber Trust Mark which becomes mandatory for CII owners, auditors, and cybersecurity providers by end-2027.
• SG Cyber Safe Programme Programme by CSA to help enterprises and individuals adopt good cybersecurity practices and enhance their security posture.
• SG Cyber Talent Umbrella national initiative to nurture talented cybersecurity enthusiasts and help professionals deepen skills. SG Cyber Talent encompasses SG Cyber Associates (foundational ISC2 CC training), SG Cyber Educators (bridging academia and industry), SG Cyber Leaders (CSLP delivered with SMU and ISTARI), SG Cyber Women (with AiSP, Div0, ISACA SheLeadsTech, SCS), SG Cyber Youth (YCEP boot camps and SG Cyber Youth Odyssey), and SG Cyber Olympians (international CTF preparation).
• SG Cyber Olympians Programme to identify, recruit, and nurture top talents to excel in cybersecurity and compete at international cybersecurity competitions (CTF); first launched in 2022 with 50 participants.
• SG Cyber Youth National programme to guide youths in their cybersecurity journey, reaching secondary to tertiary level students; includes Youth Cyber Exploration Programme (YCEP) boot camps, Advanced YCEP, and the SG Cyber Youth Odyssey four-stage learning roadmap (Excite, Explore, Experience, Excel).
• SG Cyber Leaders Programme to strengthen knowledge, leadership, and networks of current and next-generation Singaporean cybersecurity leaders; includes the Cybersecurity Strategic and Leadership Programme (CSLP) — a 13-day learning journey delivered with SMU and ISTARI.
• SG Cyber Associates Foundational and targeted cybersecurity training for non-cybersecurity professionals; partners with ISC2 for the Certified in Cybersecurity course and with professional bodies such as IES for targeted training including IoT Security Fundamentals.
• SG Cyber Women Initiative to encourage more females to join the cybersecurity profession, with outreach, skills development, and career support; partners with AiSP, Div0, ISACA SheLeadsTech, and SCS.
• SG Cyber Educators Programme for principals, teachers, and career counselors to gain knowledge on cybersecurity and career opportunities; bridges the training gap between academia and industry.
• Operational Technology Cybersecurity Expert Panel (OTCEP) Expert panel established in May 2021 to enhance cybersecurity practices and resilience within Singapore's critical infrastructure sectors through OT domain expertise; brings together OT practitioners, operators, researchers, and policy makers with internationally renowned experts for two-year terms.

Segments7 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability6 records

Feature10 records

Partnerships

23 partnerships are on record, tiered minor, core and moderate.

• Azerbaijan, Moldova, and Ukraine Cybersecurity CooperationminorStrategic or Co-development Partner · 5 June 2026Regional cooperation agreement signed at IV National Forum on Cyber Security with AKTA, Technical University of Moldova, and Scientific Association of Cyber Security of Ukraine to develop regional cooperation, share cybersecurity experience, and implement joint projects.
• GooglecoreStrategic or Co-development Partner · 21 May 2026Expanded National AI Partnership between Google and Singapore's Ministry of Digital Development and Information (MDDI) involving AI safety governance frameworks with Cyber Security Agency. Partnership spans healthcare AI, research training, and AI-enabled scientific analysis.
• Ministry of Digital Development and Information (MDDI)coreStrategic or Co-development Partner · 21 May 2026Joint leadership on National AI Partnership with Google and other AI initiatives at ATxSummit 2026. CSA works with MDDI on AI safety governance frameworks.
• OpenAIcoreStrategic or Co-development Partner · 20 May 2026MOU with OpenAI backed by over S$300 million commitment to strengthen Singapore's AI ecosystem for applied AI innovation, talent development, and governance frameworks for trusted AI deployment across finance and public sectors.
• NVIDIAcoreStrategic or Co-development Partner · 20 May 2026NVIDIA establishing its second Asia Pacific AI research lab in Singapore focused on embodied and efficient AI computing. This partnership supports Singapore's ambition to become a leading AI hub.
• Monetary Authority of Singapore (MAS)coreStrategic or Co-development Partner · 1 May 2026CSA and MAS collaborating on AI-enabled cyber threat response for banking sector. MAS convened bank CEOs to address frontier AI model threats, with CSA issuing guidance to 11 critical infrastructure sectors.
• Japan (Memorandum of Cooperation)moderateStrategic or Co-development Partner · 20 March 2026MoC to align IoT cybersecurity standards and facilitate cross-border recognition of security labels for connected devices. Aims to reduce regulatory barriers and support digital resilience and trade through mutual recognition.
• MandiantmoderateTechnology or Integration · 9 February 2026CSA collaborated with Mandiant to document UNC3886 cyber espionage campaign targeting Singapore telecom sector, including sophisticated techniques and custom malware families.
• Singapore Maritime InstitutemoderateStrategic or Co-development Partner · 28 January 2026Joint organizer of Maritime Cybersecurity and Communications Innovation Workshop with CyberSG R&D Programme Office, bringing together 56 industry practitioners, academic researchers, and government agencies.
• IBM Quantum Safe and Security ResearchcoreStrategic or Co-development Partner · 1 January 2026CSA collaborates with IBM Quantum Safe and Security Research on quantum readiness initiatives. IBM CTO Michael Osborne emphasized at Milipol TechX conference in Singapore that quantum-safe migration is primarily an IT operations and supply chain problem requiring organizations to map cryptographic dependencies.
• ISC2moderateStrategic or Co-development Partner · 1 January 2026Partner for SG Cyber Associates foundational training providing ISC2 Certified in Cybersecurity certification for Singapore participants.
• CyberSG TIG CentremoderateStrategic or Co-development Partner · 1 January 2026S$20 million TIG Centre supporting cybersecurity innovation. AgileMark, Scantist, and StrongKeep among TIG Centre-supported firms showcasing SME solutions at RSAC 2026.
• SGTechmoderateChannel Partner/ Reseller/ Distributor · 1 January 2026Joint organizer of Singapore national pavilion at RSAC 2026 with TIG Centre for cybersecurity firms showcasing SME-focused innovations.
• Digital and Intelligence Service (DIS)coreStrategic or Co-development Partner · 11 November 2025Co-organizer of Critical Infrastructure Defence Exercise (CIDeX) 2025 involving over 250 participants from 11 CII sectors. Joint launch of Cyber5G testbed for telecommunications sector threat modelling.
• Singapore University of Technology and DesignmoderateStrategic or Co-development Partner · 11 November 2025Partner in launching Cyber5G testbed with DIS for threat modelling and cyber training for telecommunications sector.
• Private Sector Partners (CIDeX)moderateStrategic or Co-development Partner · 11 November 2025Singtel, AWS, Check Point, Dragos, Fortinet, Google Cloud, and Splunk providing input on scenarios and training expertise for CIDeX 2025 exercise.
• Singapore Computer Society (SCS)moderateStrategic or Co-development Partner · 1 January 2024Partner for Cybersecurity Career Mentoring Programme to attract tertiary students and young professionals to cybersecurity careers.
• All Five Local PolytechnicsmoderateStrategic or Co-development Partner · 1 January 2024Partners in Youth Cyber Exploration Programme (YCEP) since 2019, hosting bootcamps for secondary school students. Expanded to include ITE College West in 2026.
• Institution of Engineers Singapore (IES)moderateStrategic or Co-development Partner · 1 January 2024Partner for targeted cybersecurity training under SG Cyber Associates including IoT Security Fundamentals course for engineers.
• Singapore Management University (SMU)moderateStrategic or Co-development Partner · 1 January 2024Appointed Programme Partner for Cybersecurity Strategic and Leadership Programme (CSLP) under SG Cyber Leaders, delivering 13-day learning journey for cybersecurity leaders.
• ISTARImoderateStrategic or Co-development Partner · 1 January 2024Partner in CSLP delivery alongside SMU, contributing global pool of cybersecurity experts and senior executives from industry.
• OTCEP Panel MembersmoderateStrategic or Co-development Partner · 1 January 2021Operational Technology Cybersecurity Expert Panel bringing together OT practitioners, operators, researchers, and policy makers with internationally renowned experts for two-year terms.
• Cyber Security Awareness Alliance MembersmoderateGTM or Marketing Partner · 1 January 2015Alliance formed by CSA uniting public and private sectors including 16+ organizations to promote cybersecurity awareness and safe online practices under GO SAFE ONLINE tagline.

Scale indicators5 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Cybersecurity and Infrastructure Security Agency (CISA): The US federal agency responsible for critical infrastructure cyber defence, CISA is the closest global analogue to CSA in terms of statutory authority over CII sectors, incident response, and national cyber advisories.
• National Cyber Security Centre (NCSC-UK): The UK's national technical authority for cyber incidents and CII resilience, NCSC operates an incident-response function, sector guidance, and certification schemes that directly parallel CSA's SingCERT, Cyber Trust Mark and CII oversight roles.
• Australian Cyber Security Centre (ACSC): Australia's lead cyber agency within ASD, ACSC runs an analogous 24/7 incident-response capability, critical-infrastructure posture management, and cyber-awareness programmes overlapping with CSA's mandate.
• ANSSI (Agence nationale de la sécurité des systèmes d'information): France's national cyber authority, ANSSI has comparable regulatory and incident-response powers over French operators of essential services and issues certifications/labels similar to CSA's Cyber Trust Mark and CLS.
• Bundesamt für Sicherheit in der Informationstechnik (BSI): Germany's federal cyber security agency, BSI sets standards for IT and OT security, oversees critical-infrastructure protection, and runs certification schemes that closely mirror CSA's regulatory and certification portfolio.
• European Union Agency for Cybersecurity (ENISA): EU Agency for Cybersecurity supporting member states with certification frameworks, capacity building, and cross-border incident coordination — comparable to CSA at supranational level for policy support and standard-setting around CII protection.
• Canadian Centre for Cyber Security: Canada's unified cyber authority under CSE, the Cyber Centre provides incident response, national advisories, and CII guidance — a near-equivalent role to CSA within the Five Eyes context.
• National Cyber Security Centre – Netherlands (NCSC-NL): The Dutch national CERT and CII coordinator under the Ministry of Justice and Security, NCSC-NL mirrors CSA's incident-response, advisory, and sector-coordination functions for a similarly digitally advanced economy.

Regional players

• JPCERT Coordination Centre: Japan's national CSIRT and CERT coordination partner, JPCERT/CC is a regional peer under CSA's recently signed Singapore-Japan MoC to align IoT security labels — comparable mission but Japan-centric rather than Singapore-centric.

Others

• Mandiant (Google Cloud): A global threat-intelligence and incident-response firm that CSA has worked with to document the UNC3886 campaign — comparable in incident-response capability but a commercial vendor rather than a regulator.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/cyber-security-agency-of-singapore-csa-
• Xx.com/csasingapore
• Facebookfacebook.com/CSAsingapore

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments1 record

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cyber Security Agency