Strengthening Cyber Resilience: The Cyber Security Agency of Singapore’s OT Masterplan 2024

On Tuesday, the Cyber Security Agency of Singapore (CSA) unveiled its updated Operational Technology (OT) Masterplan 2024 during the fourth edition of the Singapore Operational Technology Cybersecurity Expert Panel (OTCEP) Forum. This comprehensive document outlines the nation’s strategic initiatives aimed at enhancing technical cybersecurity skills and competencies within the OT sector, addressing the escalating threats that have emerged in the cybersecurity landscape.

A Strategic Blueprint for Cybersecurity

The OT Masterplan 2024 serves as a strategic blueprint designed to bolster Singapore’s defenses against cyber threats, ensuring a resilient and secure cyber environment for both critical and non-critical Information Infrastructure. The document emphasizes the need for enhanced cybersecurity talent, improved information sharing and reporting, and the establishment of an OT Cybersecurity Centre of Excellence. These initiatives aim to promote a secure-by-deployment approach throughout the lifecycle of OT systems, ensuring that cybersecurity is integrated from the design phase through to deployment and maintenance.

Collaborative Development with the OT Ecosystem

The Masterplan was co-created with input from over 60 organizations within the OT ecosystem, including consulting firms, educational institutions, government agencies, original equipment manufacturers (OEMs), system integrators, and cybersecurity solution providers. This collaborative effort underscores the importance of a unified approach to tackling the challenges posed by cyber threats in the OT environment.

At the launch, 14 organizations, including OEMs and cybersecurity solution providers, committed to adopting Secure-by-Deployment principles across the entire lifecycle management of OT systems. This collective commitment highlights the critical role that all stakeholders play in enhancing the cyber resiliency of the OT ecosystem.

Addressing Evolving Cyber Threats

David Koh, commissioner of cybersecurity and chief executive of CSA, noted that the OT cyber threat landscape has changed significantly since the inaugural OT Cybersecurity Masterplan was launched in 2019. The rapid digitalization of the OT/IT environment has introduced new attack vectors, exposing the OT environment to potential cyber risks. The updated Masterplan aims to address these evolving risks and challenges, ensuring that Singapore can safely embrace the digital world.

Building a Competent Cybersecurity Workforce

One of the key initiatives outlined in the OT Masterplan 2024 is the development of a competent OT cybersecurity workforce. CSA plans to incorporate OT cybersecurity into the professionalization framework for Singapore’s cybersecurity workforce, collaborating with Institutes of Higher Learning to integrate relevant OT cybersecurity syllabi into computer science and engineering degree programs. This initiative aims to equip graduates with essential OT cybersecurity competencies, enhancing their employability and readiness to tackle cyber threats.

Additionally, CSA will profile OT cybersecurity in its Cybersecurity Education & Learning Guide, which will provide valuable resources for individuals considering a career in cybersecurity. This guide will include information on the OT Cybersecurity Competency Framework (OTCCF), workforce data, trends, and learning roadmaps.

Enhancing Situational Awareness and Information Sharing

To better safeguard Singapore’s Critical Information Infrastructure (CII) and other important OT systems, the OT Masterplan emphasizes the need to strengthen situational awareness in cyberspace. CSA plans to streamline the information-sharing process and enhance collaboration with the OT Information Sharing and Analysis Center (OT-ISAC) and sector regulators. This collaborative effort aims to create a comprehensive threat intelligence ecosystem that can effectively respond to emerging cyber threats.

Moreover, CSA is developing a data-driven model to increase visibility into the cyber supply chain ecosystem, which will help monitor and mitigate risks associated with vendor dependencies. This initiative is part of the CII Supply Chain Programme launched in 2022, aimed at protecting CII and related systems managed by vendors.

Promoting Resilience Through Guidelines and Best Practices

The OT Masterplan 2024 also highlights the importance of updating existing guidelines, such as the ‘Guide to Conducting Cybersecurity Risk Assessment.’ These updates will emphasize consequence-based scenarios, enabling organizations to handle adverse events more resiliently. CSA will promote relevant technical references to secure cyber-physical systems, ensuring that operations are safeguarded against both cyber and physical attacks.

The document stresses that cybersecurity features should not be an afterthought. The adoption of secure-by-deployment principles is crucial for safeguarding the entire lifecycle management of OT systems, involving multiple stakeholders from OEMs to asset owners.

Establishing an OT Cybersecurity Centre of Excellence

To further support research into emerging OT cybersecurity technologies, CSA plans to establish an OT Cybersecurity Centre of Excellence. This center will provide a realistic environment for testing and developing solutions that address industry concerns about the impact of cybersecurity on business operations.

Conclusion: A Collective Responsibility

As cyber threats continue to evolve in scale, frequency, and sophistication, the OT Masterplan 2024 emphasizes the need for a collective response from the government, businesses, and individuals. The document underscores that cybersecurity is a team sport, requiring a significant shift in mindset. The entire lifecycle management of OT systems must be considered, with every stakeholder playing a role in ensuring a resilient OT cyber environment.

Ultimately, the OT Masterplan 2024 aims to position Singapore as an attractive and secure hub for digital innovation and investment, safeguarding essential services while promoting a sustainable pipeline of competent OT cybersecurity professionals. As the CSA continues to adapt to the changing cyber landscape, the collaborative efforts outlined in this Masterplan will be crucial in building a robust cybersecurity framework for the future.

Anna Ribeiro is a freelance journalist with over 14 years of experience in security, data storage, virtualization, and IoT. She serves as the Industrial Cyber News Editor.