Personal Data Protection Act (PDPA) 2012: Singapore's primary data protection legislation that governs the collection, use, disclosure, and care of personal data. Must be considered in secure SDLC for handling personal information.
Computer Misuse Act: Legislation dealing with cybercrime and unauthorized access to computer material. Influences security controls and protection measures in software development.
Cybersecurity Act 2018: Framework for protection of Critical Information Infrastructure (CII) and cybersecurity incident reporting. Impacts security requirements and incident response procedures.
Electronic Transactions Act: Provides legal foundation for electronic transactions and digital signatures. Relevant for secure authentication and transaction handling in software development.
Cybersecurity Code of Practice (CCoP): Singapore's national guidelines for cybersecurity practices and standards. Provides baseline security requirements for software development.
MAS Technology Risk Management Guidelines: Regulatory guidelines for financial institutions in Singapore, covering technology risk and cybersecurity requirements for financial sector software.
Singapore Common Criteria Scheme (SCCS): National IT security product evaluation and certification scheme. Provides security evaluation criteria for software products.
Singapore Standards (SS) 584: National standard for secure software development practices specific to Singapore context.
ISO/IEC 27001: International standard for information security management systems. Provides framework for securing development environments and processes.
ISO/IEC 27034: International standard specifically focused on application security. Provides guidance for secure software development practices.
OWASP Security Guidelines: Industry-standard guidelines for secure application development, including common vulnerabilities and security controls.
NIST Cybersecurity Framework: Comprehensive framework for managing and reducing cybersecurity risks in software development.
Multi-tier Cloud Security (MTCS) Standard: Singapore's cloud security standard that specifies security requirements for cloud service providers and users.
Singapore Trust Services (SS): Requirements for trust services and electronic transactions security in Singapore.
Data Protection Impact Assessment: Mandatory assessment requirements for projects involving personal data processing, affecting software development planning and design.
