Momentum Z Featured on CH8's Coverage on New Cybersecurity Licensing Framework by CSA
Momentum Z was featured on Singapore's Channel 8 with Cyber Security Agency of Singapore on Cybersecurity Licensing Framework for cybersecurity providers. Our CEO, Shane Chiang, shared about the importance of Vulnerability Assessment and Penetration Testing (VAPT) which is a broad range of security assessment services designed to identify and help address cyber security exposures across an organisation's IT estate, website, mobile application. In simpler terms, we help to look for gaps where a malicious threat actor might take advantage of to breach your network or applications to steal the data, or to plant a malware. Email to firstname.lastname@example.org to find out more.
The Cyber Security Agency of Singapore (CSA) has announced the launch of its licensing framework for cybersecurity service providers under Part 5 of the Cybersecurity Act (CS Act). The licensing framework will take effect from 11 April 2022. Part 5 of the CS Act and the Second Schedule to the CS Act will both come into force on the same day.
Under the new framework, which is stipulated under section 49 of the CS Act, existing cybersecurity service providers who are already engaged in the businesses of providing either or both licensable cybersecurity services will be given six months (i.e. by 11 October 2022) to apply for a licence. Cybersecurity service providers who do not apply for a licence in time will have to cease the provision of licensable cybersecurity service until a licence is obtained.
CSA has set up the Cybersecurity Services Regulation Office (CSRO) to administer the licensing framework and facilitate liaisons with the industry and wider public on all licensing-related matters. The functions of the CSRO include:
Enforcing the licensing framework, for example managing licensing processes, imposing and enforcing licence conditions;
Responding to queries and feedback from licensees, businesses and public; and
Developing and sharing resources on licensable cybersecurity services with consumers such as the list of licensees.