Cyber Risks · Dragos Blog

Singapore CCoP Compliance

Summary: Singapore's CCoP for Critical Information Infrastructure, last updated December 2022, sets out detailed guidelines for protecting critical infrastructure including operational technology, and applies to Critical Information Infrastructure Owners across essential service sectors. The code covers 11 sections: Preliminary, Audit, Governance, Identification, Protection, Detection, Response and Recovery, Cyber Resiliency, Training and Awareness, Operational Technology Security, and Domain-Specific Practices for internet-facing systems.

Bottom line: The code binds Critical Information Infrastructure Owners across essential service sectors to 11 sections of obligations, including a dedicated Operational Technology Security section and a separate one for internet-facing systems - a scope that reaches well past traditional IT boundaries.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026