Entities of Special Cybersecurity Interest (ESCIs) - Cyber Security Agency of Singapore

The ESCI framework empowers CSA to designate and regulate entities performing functions or holding data of national importance where cybersecurity incidents could significantly harm Singapore's interests. Designated organizations must now comply with specific cybersecurity obligations to enhance protection and resilience of their systems.

Mandatory Requirements

Entities designated as ESCIs face several mandatory requirements. They must provide CSA with information about their computer systems, comply with written directions from CSA to address cybersecurity risks, and report prescribed cybersecurity incidents to the agency.

National Cyber Resilience

The implementation of the ESCI regime represents another significant step in safeguarding Singapore's national interests and strengthening the nation's overall cybersecurity posture. CSA will continue working closely with designated ESCIs to build cybersecurity resilience and protect critical functions and data.