Maritime and Port Authority of Singapore (Amendment) Bill · cl 7

Suggest a correction

Tell us what is wrong in this text. We check every suggestion against the official version before we change anything.

What is wrong?Wrong or mistyped wordsWrong structure or numberingWrong title or detailsText that appears twice

What should change, and whyUp to 2,000 characters.The text as it should read (optional)

In the MPA Act, after the Sixth Schedule (as renamed by section 6), insert —“SEVENTH SCHEDULESections 89K, 89X and 118BStandards of performance for cybersecurity: included matters1. Standards or specifications relating to the design, configuration or security of any designated III.2. Measures and procedures to monitor, detect, identify and analyse cybersecurity threats and cybersecurity incidents.3. Measures and procedures to minimise the risk posed by cybersecurity threats including the periodic review of such measures and procedures.4. The keeping of records relating to the matters mentioned in paragraphs 2 and 3.5. Procedures to disclose information relating to any cybersecurity threat or cybersecurity incident to other persons who may be potentially affected by that threat or incident or similar threat or incident.6. Procedures to assess, test and evaluate the cybersecurity of any designated III including by searching for cybersecurity vulnerabilities that may compromise the cybersecurity defences of the designated III.7. Measures and procedures to deal with and respond to cybersecurity threats and cybersecurity incidents adequately including the establishment of contingency, communications, recovery and business continuity plans in respect of those threats and incidents.8. The keeping of records relating to any designated III and any computer or computer system or other device or asset that is directly connected to the designated III.9. Engagement of a cybersecurity service provider for the provision of cybersecurity service for the designated III, or installation of any computer program, to ensure or safeguard the cybersecurity of a computer or computer system.10. Procedures and measures to develop, maintain and improve competencies and standards of employees and officers of notified operators in relation to cybersecurity and promote awareness of the need for and the importance of cybersecurity.11. Measures to strengthen accountability for and oversight of cybersecurity by the key appointment holders of notified operators.”.

Edit the text above. Up to 20,000 characters.Where you checked it (optional)A link to the official version, if you have one.

The text as we hold it

Open the official text

cl 7New Seventh Schedule

In the MPA Act, after the Sixth Schedule (as renamed by section 6), insert —“SEVENTH SCHEDULESections 89K, 89X and 118BStandards of performance for cybersecurity: included matters

1. Standards or specifications relating to the design, configuration or security of any designated III.

2. Measures and procedures to monitor, detect, identify and analyse cybersecurity threats and cybersecurity incidents.

3. Measures and procedures to minimise the risk posed by cybersecurity threats including the periodic review of such measures and procedures.

4. The keeping of records relating to the matters mentioned in paragraphs 2 and 3.

5. Procedures to disclose information relating to any cybersecurity threat or cybersecurity incident to other persons who may be potentially affected by that threat or incident or similar threat or incident.

6. Procedures to assess, test and evaluate the cybersecurity of any designated III including by searching for cybersecurity vulnerabilities that may compromise the cybersecurity defences of the designated III.

7. Measures and procedures to deal with and respond to cybersecurity threats and cybersecurity incidents adequately including the establishment of contingency, communications, recovery and business continuity plans in respect of those threats and incidents.

8. The keeping of records relating to any designated III and any computer or computer system or other device or asset that is directly connected to the designated III.

9. Engagement of a cybersecurity service provider for the provision of cybersecurity service for the designated III, or installation of any computer program, to ensure or safeguard the cybersecurity of a computer or computer system.

10. Procedures and measures to develop, maintain and improve competencies and standards of employees and officers of notified operators in relation to cybersecurity and promote awareness of the need for and the importance of cybersecurity.

11. Measures to strengthen accountability for and oversight of cybersecurity by the key appointment holders of notified operators.”.