Singapore legislation
Regulation 2
of Cybersecurity (Systems of Temporary Cybersecurity Concern) Regulations 2025
Regulation 2
Information to ascertain if computer, etc., fulfils criteria of system of temporary cybersecurity concern
Subregulation 1
For the purposes of section 17A(2) of the Act, a notice to provide relevant information to the Commissioner under that provision must be given in writing in the form set out on the Internet website at https://www.csa.gov.sg.
Subregulation 2
The Commissioner may by notice under section 17A(2) of the Act require a person who appears to be exercising control over a computer or computer system, to provide to the Commissioner the following information relating to that computer or computer system as is relevant for the purpose of ascertaining whether the computer or computer system fulfils the criteria of a system of temporary cybersecurity concern:
the name and location of the computer or computer system;
the function that the computer or computer system is employed to serve;
the type of service (if applicable) that the computer or computer system has a role in making available in Singapore, and the role performed by the computer or computer system;
the person or persons, or other computer or computer systems, that the computer or computer system mentioned in the notice serves;
information relating to the design of the computer or computer system, including the parameters and key components of the computer system, as specified in the notice;
if the computer or computer system is a virtual computer or virtual computer system, information relating to the physical computing resources used for the simulation of the virtual computer or virtual computer system, including identifying information relating to the cloud computing service provider where the physical computing resources used for the simulation of the virtual computer or virtual computer system are provided by a cloud computing service provider;
the name, address, contact and business registration number (if applicable) of the person to whom the notice is given;
if the person to whom the notice is given is not the owner of the computer or computer system, the name, address, contact and business registration number (if applicable) of the owner;
any other information that the Commissioner may require in order to ascertain whether the computer or computer system fulfils the criteria of a system of temporary cybersecurity concern.
Subregulation 3
In this regulation, “location”, in relation to a computer or computer system that is a virtual computer or virtual computer system, means the location of the physical computing resources deployed for the simulation of the virtual computer or virtual computer system.