Singapore Cybersecurity Update Puts Cloud Providers on Notice

Singapore updated its Cybersecurity Act to strengthen oversight of critical information infrastructure by explicitly covering cloud and third-party service usage, expanding incident reporting obligations, and creating new entity categories (e.g., provider-owned and non-provider-owned CII, foundational digital infrastructure). The amendment aims to improve national cyber resilience amid increasing nation-state and criminal threats and technological disruptions, while acknowledging implementation and compliance challenges for affected organizations.