WHAT THE BILL COVERS
Currently, CII owners are just required to report security incidents involving connected or communicated laptop systems under their control.
Users will also be required to report incidents involving systems that are outside of CII if the fresh law is passed.  ,
The Bill may enable CSA to safeguard STCCs in advance of their security, along with other crucial facilities.
The temporary systems used to help the circulation of crucial vaccines during a pandemic serve as an example of an STCC. During the COVID- 19 pandemic, destructive cybercriminals targeted the immunization distribution systems used by healthcare organizations all over the world.
In addition, CSA will create two new classes of regulated entities: Entities of Special Cybersecurity Interest ( ESCI) and Foundational Digital Infrastructure ( FDI).  ,
These two courses may be subjected to “light effect” regulations as they are not critical information system.  ,
ESCI, such as automatic universities, may keep sensitive information or do a work of national interest, for that their disruption could produce potential adverse effects on the defence, international relations, economy, public health,  , safety, or order of Singapore.
Under the Bill, CSA will be able to , identify and control ESCI for security. According to Singapore’s cybersecurity agency, these entities ‘ obligations wo n’t be the same as those for CIIs.  ,
In addition, the Bill mandates that businesses, such as data centers and cloud service providers, get in charge of cybersecurity of such online facilities.
This includes adhering to cybersecurity standards and codes of conduct as well as reporting prescribed cybersecurity incidents to CSA, which wo n’t also be at the level of a CII, according to the organization.
CSA added that it had consulted thoroughly on the Bill, through customer and public sessions. If passed, the organization stated that it would remain to consult with partners to make the Bill work.