Singapore Cybersecurity Act 2018
Part 3A: Providers responsible for third-party-owned CII – Singapore Cybersecurity Act 2018

Singapore Cybersecurity Act 2018 16B: Provide information to help decide whether third-party-owned systems are CII

What does 16B require?

A person in Singapore who appears to provide an essential service using a computer or computer system it does not own must, on notice, provide the information within its knowledge or reasonably obtainable about that system's function, users, design and anything else needed to assess the s 16A criteria; the Commissioner may order it to stop using the system if it fails to comply.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Part 3A: Providers responsible for third-party-owned CII – Singapore Cybersecurity Act 2018

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.