Announced CII cyber-resilience framework review cadence

Record details

Value

CSA announced that CII owners will need a documented cyber-resilience framework reviewed at least annually

Unit

planned review cadence

Value type

observation

Population

Owners of designated Critical Information Infrastructure subject to the updated CII CCoP

Denominator

At-least-annual review is a planned control cadence, not a statistic about how many organisations currently review their frameworks

Reference period

CSA announcement published 22 July 2026; updated CII CCoP planned for the second half of 2026

Retrieved

2026-09-10

Published

2026-07-22

Geography

sg.geo.country.singapore

Notes

The announced cadence should not be generalized to non-CII organisations.

Dates describe this record’s own period and applicability. A verification date does not mean a rule is currently in force.

Sources

• https://www.csa.gov.sg/news-events/press-releases/cybersecurity-code-of-practice-for-critical-information-infrastructure-to-be-updated-to-address-apt-and-ai-enabled-threats/ Accessed 2026-09-10