Interpretation of this Part
Open ↗64. In this Part, unless the context otherwise requires —“designated public entity” means a public entity that is declared by the Minister under section 66(3) to be a designated public entity;
“relevant system or service”, in relation to a designated public entity, means the system or service of the designated public entity in respect of which arrangements are established under section 66;
“responsible Minister”, in relation to a public entity or designated public entity, means the Minister charged with the responsibility for —(a)
the sector or industry that includes the public entity or designated public entity; or
(b)
the public authority that regulates the public entity or designated public entity.
Responsible Minister’s request to Agency
Open ↗65. A responsible Minister may request the Agency to assist a public entity to ensure the security or reliability of any info‑communications technology or related engineering system or service of the public entity if the responsible Minister is of the opinion that —(a)
the security or reliability of the system or service is at significant risk or has been significantly compromised; and
(b)
it is in the public interest, or in the interest of public safety or the security of Singapore, to make the request to the Agency.
Arrangements with public entity
Open ↗66.—(1) Upon the responsible Minister making a request under section 65, the Minister charged with the responsibility for the Agency may direct the Agency to establish the necessary arrangements with the public entity on the steps that the Agency may take under section 67, including with respect to —(a)
the matters in respect of which the Agency may exercise its powers under section 67; and
(b)
the methodologies and procedures to be adopted by the Agency when exercising its powers under section 67.
(2) The arrangements established under subsection (1) must be submitted to the responsible Minister for his or her approval.
(3) After the responsible Minister approves the arrangements, the Minister charged with the responsibility for the Agency may, by notification in the Gazette, declare the public entity to be a designated public entity and specify the date on which the arrangements are to take effect.
(4) The Agency and the designated public entity may, at any time, by agreement, vary the arrangements with the approval of the responsible Minister.
Agency’s powers
Open ↗67. Subject to the arrangements established and approved under section 66, the Agency may do any or all of the following in relation to the designated public entity:(a)
develop, and recommend to the designated public entity, directives, codes, standards or guidelines in relation to the architecture or use of the relevant system or service of the designated public entity;
(b)
carry out an audit, or require an audit to be carried out, of the architecture or use of the relevant system or service;
(c)
advise the designated public entity to implement any security, mitigation or recovery measures that the Agency considers necessary;
(d)
advise the designated public entity on the deployment of any resources (including personnel) of the designated public entity, that the Agency considers necessary, for the purpose of implementing the measures;
(e)
report to the designated public entity and the responsible Minister on the matter, including on the outcome of the investigations undertaken by, and the status of the designated public entity’s adoption and implementation of any advice or recommendation of, the Agency.
Source: Singapore Statutes Online (Attorney-General's Chambers), © Government of Singapore.
