THE Cyber Security Agency of Singapore (CSA) is reviewing the national cybersecurity act to potentially include non-critical information infrastructure which plays an important role in connectivity, computing and data storage needs.

The Cybersecurity Act, enacted in 2018, focuses on computer systems involved in delivering essential national services in the physical world, such as water and energy.

Critical sector organisations need to ensure the security of their systems and report cyberattacks within hours, among other requirements.

In her Budget debate speech on Friday (Mar 4), Minister for Communications and Information Josephine Teo highlighted the importance of securing digital infrastructure beyond critical information infrastructure (CII).

"Digital infrastructure and services are the backbone of our connectivity, computing and data storage needs. If disrupted or compromised, there could be serious knock-on effects," she said. "Imagine the chaos of not having access to emails, websites and apps."

CSA will consider how to apply a "risk-based approach" to protect these infrastructure and services, and for them to recover quickly after an attack.

GET BT IN YOUR INBOX DAILY

Start and end each day with the latest news stories and analyses delivered straight to your inbox.

Sign UpVIEW ALL

It intends to complete the review by 2023 with stakeholder and public consultations.

The review will also consider the inclusion of virtual assets as CII. The Act currently only recognises physical networks and systems as critical infrastructure.

"With a shift to virtualisation, we must be able to recognise virtual assets as CII too, such as systems hosted on the cloud. We need to make sure that these virtual assets are properly protected too, including those not hosted in Singapore," Teo said.

CSA will also look into better ways to keep watch over Singapore's cyberspace, in order to alert organisations to serious vulnerabilities.

Teo also announced measures to safeguard other areas of digital services. In April, the Infocomm Media Development Authority will launch an alternative dispute resolution scheme that consumers and small businesses can tap when resolving disputes with their telco or media service providers.

Current options can be costly and less consumer friendly, Teo said.

When a case is brought under the alternative dispute resolution scheme, service providers are required to participate in the resolution process.