SMEs THE “WEAKEST LINK”
Singapore’s CII sectors are governed by the Cybersecurity Act, which imposes higher security standards and mandatory incident reporting obligations.
But experts warn that while these companies may be tightly regulated, the ecosystem around them may not be.
CII operators rely on vendors – which include SMEs – for logistics, software development, engineering and professional services.
Yet, many of these smaller firms are not directly regulated under the Act.
In a highly connected digital ecosystem, weaker cybersecurity at smaller vendors can provide threat actors with a foothold that may lead to larger, more strategically important organisations, experts say.
