#WorkinginCSA: Shaping National Cybersecurity Standards for a Safer Digital Landscape

1. Tell us more about your team’s work and your role as a Senior Consultant in the Safer Cyberspace Division (SCD).

My focus areas in SCD include the development, publication and maintenance of national cybersecurity standards for organisations such as Cyber Essentials and Cyber Trust. Many organisations may view cybersecurity as a “burden”, however, certification standards serve as a visible label of the organisation’s efforts in implementing cybersecurity. Singapore has been making a strong push for organisations to go digital. Alongside a dynamic threat landscape, digitalisation expands the organisation’s attack surface, and organisations that proactively demonstrate that their commitment to cybersecurity would enjoy a competitive edge. I also manage the appointed certification bodies that conduct the independent assessment and issuance of the Cyber Essentials and Cyber Trust certification standards.

To ensure the certification standards for organisations remain relevant, we continuously monitor and review new or updates to cybersecurity frameworks and standards internationally. Through ongoing engagement and consultation with stakeholders and industry partners, we ensure that national cybersecurity standards remain relevant and aligned with key shifts in the industry. For example, we are currently updating and expanding Cyber Essentials and Cyber Trust to go beyond ‘classical’ cybersecurity measures, incorporating areas such as cloud security, Operational Technology security, and Artificial Intelligence security, to better support organisations adopting new technologies.

2. What inspired you to pursue a career in this field?

I am an electronics engineer by training and have always been passionate about leveraging technology to contribute to national security. My career began well before the term “cybersecurity” became popular, as I worked across various security domains in defence and homeland security. What initially drew me to this field was my desire to make a significant impact by playing a critical role in protecting systems and data. This dedication led me to spend the majority of my career in the government and public sectors before joining CSA in 2021.

After years of helping to safeguard government systems and witnessing how vulnerable organisations – especially SMEs – are to malicious cybersecurity activities, SCD’s mission to enhance the cyber resilience of Singaporean organisations strongly resonates with me. I am happy that my work in SCD can help to elevate our national cybersecurity postures by establishing cybersecurity standards that guide organisations, continuing my commitment to national security.

3. What are some projects you’ve worked on in CSA that you found particularly interesting and/or challenging?

One of the most challenging yet rewarding projects I worked on at CSA was the development and launch of Cyber Essentials and Cyber Trust as national standards. The deadline was tight, and we had to manage multiple tasks simultaneously, such as “road-testing” the certification requirements, finalising the framework write-ups, appointing certification bodies, and engaging with a variety of stakeholders both within CSA and government, as well as across the industry.

One key learning point for me was adapting the Cyber Essentials and Trust frameworks into a “standards writing style”, which was a new experience. Despite the time constraints, the team worked efficiently and collaboratively, and managed to deliver the results on time and launch the Cyber Essentials and Trust certification marks. The successful launch, officiated by SMS Tan Kiat How at the MBS Convention Centre on 29 March 2022, was a proud moment for all involved.

Both my divisional director and supervisor have been instrumental in mentoring and guiding me in my professional life. Since joining CSA, I have improved my skills in critical thinking, problem-solving, and attention to detail. I am also given the opportunities to hone my soft skills via collaboration with other government agencies and industries. I would also like to thank them for their trust in me.

4. Tell us something about your job that not many people know about.

One part of our work involves extensive engagements with end user organisations and major technology companies that we work with. This aspect of our work tends to be more “visible”, resulting in a common misconception that SCD primarily focuses on outreach. In reality, our core work revolves around cybersecurity standards for organisations, or looking into cybersecurity risk management, and in time to come, this could extend to adjacent areas such as cloud security, OT security and AI security risk management.

While outreach is one part of the division’s work, we also work with technology companies to engage and rally industry participation to amplify the SG Cyber Safe initiatives. Cybersecurity is a shared responsibility, and as the national authority for cybersecurity, CSA plays an active role in helping organisations strengthen their cybersecurity postures.

5. Outside of work, do you have any hobbies and interests? How do you unwind from work?

In my free time, I enjoy travelling and watching YouTube and Netflix. I try to travel overseas at least twice a year (beyond just crossing the causeway!) as I enjoy experiencing different cultures, exploring new sceneries, and trying all kind of food. When I’m not travelling, I like watching travel-related content on YouTube or Netflix, as this allows me to “experience” different cultures, sceneries, and food virtually. 😊

I also enjoy unwinding with relaxing walks in parks and hope to explore more parks in Singapore that I have yet to visit. I believe it is important to take time to recharge and look after our personal well-being. It not only keeps us healthy but also helps us stay productive when we are back at work.