Suggest a correction

Cyber Security Agency's Role in Investigating Mobile Guardian App's Hacking Incident

Hansard, Tuesday, 10 September 2024

Match the official source exactly.

What needs fixing?

Wrong or mistyped textWrong structure or numberingWrong title or detailsDuplicated content

Proposed text

But not all Government information technology (IT) systems are designated as CIIs, nor should they be. Disruptions to non-CII IT systems cause varying degrees of impact. It is therefore only practical to take a risk-based approach in managing their cybersecurity and resilience. Their disruption may cause inconvenience and loss which should certainly be avoided. But the consequences are generally localised or do not pose widespread or systemic disruptions compared to disruption to a CII. The owners of these non-CII systems are in the best position to decide the resources to be put in to protect such systems against disruption, which should in general, be proportionate to their risks and impact. All systems must, however, maintain a baseline of cybersecurity and resilience measures that are appropriately stepped up according to their risk assessments. Defensive measures must also be complemented by business continuity plans that mitigate the impact of disruptions when they occur. Agencies that own IT systems are responsible for their cybersecurity and resilience. They can draw on the expertise of CSA and the Government Technology Agency (GovTech), if needed, to investigate vulnerabilities and compromises that have been discovered.

What's the problem? (required)

Source link (optional)

Describe the problem (and edit the text or pick an issue type) to submit.

Suggestions are submitted anonymously. No account or personal information is required or sent.