COI Report – Part II
Page
33 of
425 (b) Sector Lead. Sector Leads oversee and regulate CII owners within their respective sectors. They are the Sectoral
Cyber Incident Managers, providing second-tier response, as they are in the best position to assess the related business risks, and impact of such threats, to the sector. c)
CSA. The national agency
in charge of cybersecurity, CSA oversees 11 CII sectors
9
and is the National Cyber Incident Manager, which coordinates incident response efforts across the sectors. CSA provides third-tier response, supporting Sector Leads and CII owners when required.
10.2.2 Categories of security incidents 97.
CII perform critical functions in order to provide essential services which, if disrupted, would have a debilitating impact on Singapore’s national security,
economy, or public health and safety. Incidents associated with the critical functions of CII or provision of essential services must be reported to CSA in a timely manner to facilitate investigations. The three categories of incidents that Sector Leads must report to CSA are i) Category 1: Incident directly affecting CII. ii) Category 2: Incident occurring on systems or network that could put the CII at risk. iii) Category 3: Incident occurring on systems or network within CII sector that is not covered under Category 1 and Category 2. The 11 sectors are Energy, Water, Banking and Finance, Healthcare,
Land Transport, Maritime Transport, Aviation, Infocomm, Media, Security
and Emergency Services, and Government.
