PDPA 2012: Personal Data Protection Act - Singapore's primary legislation governing the collection, use, disclosure, and care of personal data. Key consideration for risk assessment templates regarding data protection and privacy requirements.
Cybersecurity Act 2018: Framework for the protection of Critical Information Infrastructure (CII) and regulation of cybersecurity service providers in Singapore. Essential for threat and vulnerability assessment considerations.
Computer Misuse Act: Legislation addressing computer crimes and unauthorized access. Important for identifying and assessing potential criminal threats in the risk assessment.
CII Regulations: Specific regulations for Critical Information Infrastructure sectors, defining mandatory security requirements and incident reporting obligations.
MAS TRM Guidelines: Monetary Authority of Singapore's Technology Risk Management Guidelines - Specific requirements for financial institutions regarding technology risk assessment and management.
IMDA Frameworks: Info-communications Media Development Authority frameworks providing guidelines for information security and risk management in the technology and media sectors.
ISO 27001: International standard for information security management systems, providing framework for risk assessment and security controls.
NIST Cybersecurity Framework: Internationally recognized framework for managing cybersecurity risk, useful for structuring threat and vulnerability assessments.
TR 55: Singapore's Technical Reference 55 for Cloud Security, providing guidelines for cloud security risk assessment and management.
SS 584: Singapore Standard 584 for Information Security Management Systems (ISMS), providing local context to ISO 27001 implementation.
MTCS SS: Multi-Tier Cloud Security Singapore Standard - Specific requirements for cloud service providers and users in Singapore regarding security assessment.
Privacy by Design: PDPA requirement ensuring privacy considerations are built into systems and processes from the ground up, essential for risk assessment methodology.
