In more detail
APTs focus on using sophisticated techniques and tools to avoid detection and sustain long-term access to critical networks.
In July 2025, the Coordinating Minister for National Security announced that Singapore was dealing with an APT attack on its critical infrastructure. Singapore also saw a four-fold increase in APT activity from 2021 to 2024.
Amid this heightened state of alert, and following the previous amendments to the Cybersecurity Act to strengthen incident reporting requirements (see our client alerts from May 2024, April 2024 and March 2024 for more details), MDDI announced its intent to introduce new requirements for CII owners to notify CSA of cybersecurity incidents that they suspect may have been caused by an APT.
The proposed regulations are intended to help identify APT activity early and allow CSA, in coordination with other government agencies, to respond swiftly when defending CII owners from these threats
Key takeaways
The rise in sophisticated cybersecurity attacks, fueled by escalating geopolitical tensions, has made it clear that organizations should not face these threats alone. The severity and complexity of such attacks demand a coordinated response. The amended reporting requirements underscore the importance of collaboration between governments and businesses, aligning with international best practices to strengthen collective cybersecurity resilience.
* * * * *

© 2025 Baker & McKenzie. Wong & Leow. All rights reserved. Baker & McKenzie. Wong & Leow is incorporated with limited liability and is a member firm of Baker & McKenzie International, a global law firm with member law firms around the world. In accordance with the common terminology used in professional service organizations, reference to a "principal" means a person who is a partner, or equivalent, in such a law firm. Similarly, reference to an "office" means an office of any such law firm. This may qualify as "Attorney Advertising" requiring notice in some jurisdictions. Prior results do not guarantee a similar outcome.