Skip to main content

CSA will never ask you to transfer money or disclose banking details. Stay vigilant.

If unsure, call the 24/7 ScamShield Helpline at 1799 to check. www.scamshield.gov.sg

Cyber Security Agency of Singapore
  1. Home
  2. Our Programmes
  3. Support for Enterprises
  4. SG Cyber Safe Programme
  5. Cybersecurity Certification for Organisations
  6. Cyber Essentials
  7. Certification for the Cyber Essentials Mark

Certification for the Cyber Essentials Mark

Strengthening organisational cyber defences with CSA's Cyber Essentials certification through expert and funding support.

Last updated 10 March 2025

On this page

Cyber Essentials
Cyber Essentials for CMS vendors
Added benefit for certified organisations
Additional information

Cyber Essentials

Organisations seeking certification may refer to the following:
(Note: Documents were last updated in March 2025)

The Cyber Essentials mark is published as Technical Reference 106 (TR 106) under the Singapore Standardisation Programme. Organisations may obtain a copy of TR 106:2022 “Tiered cybersecurity standards for enterprises” from the Singapore Standards e-shop.

The Cyber Essentials mark is being updated in 2025 to go beyond classical cybersecurity, and now also provides protection for organisations implementing cloud computing, Operational Technology (OT) and Artificial Intelligence (AI). The update will see Cyber Essentials mark being published as a Singapore Standard (SS).

The revised Cyber Essentials (2025) mark will be launched on 15 April 2025. Please visit this webpage again then for the final certification documents.

Cyber Essentials for CMS vendors

(Note: This is a sub-scheme of Cyber Essentials, and is applicable to Clinic Management Solution (CMS) vendors under the Ministry of Health CMS tiering framework.)

Note: Documents were last updated in February 2023

a. Certified organisations

Small and Medium Enterprises (SMEs) that are certified are also eligible to apply for the SME Cybersecurity Excellence award that CSA is collaborating with Association of Trade & Commerce (ATC) on.

b. How to get certified

The certification process is undertaken by certification bodies that have been appointed by CSA. Organisations may approach any of the certification bodies, please visit our "How to get certified" page for contact details.

c. Certification duration and mode of assessment

The Cyber Essentials certification is valid for a duration of 2 years. The mode of assessment will involve desktop review and verification of the organisation’s self-assessment by an independent assessor from the appointed certification body.

Certification charges and the time needed for certification may differ according to the scope of the certification. Organisations may visit the websites of the certification bodies listed above to find out more.

d. Funding support for Cyber Essentials mark certification

To encourage organisations to adopt the Cyber Essentials mark, CSA has worked with the appointed certification bodies to offer funding support for Cyber Essentials mark certification. Organisations that are successfully certified^ can enjoy the following funding support, which will be deducted from the certification fees charged by the certification bodies:

Quality of end-points and its corresponding maximum level of funding support from CSA

Quantity of End-points

Maximum Level of Funding Support from CSA*

To be deducted from the certification fees charged by certification bodies

1-10

$250

11-20

$350

21-50

$450

51-100

$500

101-200

$550

* The following considerations applies to the funding support:

  • Applicable only from now to 6 February 2026

  • Funding support for Cyber Essentials mark is applicable only for the first successful Cyber Essentials certification per organisation

  • Only SMEs and Non-Profit Organisations (NPO) incorporated in Singapore are eligible

  • Organisations shall submit their completed application forms to their selected certification bodies.

^ This funding support is also applicable to eligible organisations applying for sub-schemes of Cyber Essentials, e.g. Cyber Essentials for CMS Vendors

Organisations that are members of the National Council of Social Services (NCSS) are also eligible for subsidies from NCSS under the Tech-and-GO! consultancy programme.

e. Cybersecurity health plan delivered by CISO as-a-Service (CISOaaS) consultants

Ready to start your cybersecurity journey but lack in-house cybersecurity manpower? Cybersecurity consultants onboarded by CSA will take on the role of your “Chief Information Security Officer” (CISO), delivered as-a-Service, to improve your cyber resilience through cyber health “checkups”. You will develop a cybersecurity health plan tailored for your needs and work towards national cybersecurity certification such as attaining CSA’s Cyber Essentials mark.

Develop your cybersecurity health plan with your appointed CISOaaS consultant now.

Funding support is available for eligible SMEs.

f. Cybersecurity toolkits and guidance to support certification

Need help with the cybersecurity measures you can implement to improve your organisation’s cybersecurity? Check out our cybersecurity toolkits for guiding questions, templates and more.

Added benefit for certified organisations

Cyber Insurance

Cyber Essentials certified organisations are eligible for discounted rates when they apply for cyber insurance with the following:

Please contact the companies listed for details.

Google Cybersecurity Certificate Scholarship

Organisations that have already appointed a certification body for Cyber Essentials certification are eligible to be offered scholarships for the Google Cybersecurity Certificate. Please approach your appointed certification body for more information.

Additional information