- Home
- Our programmes
- Support for enterprises
- SG Cyber Safe Programme
- Cybersecurity Certification for Organisations
- Cyber Trust
- Certification for the Cyber Trust mark
Certification for the Cyber Trust mark
CSA's Cyber Trust mark offers 3-year certification with annual audits, funding support up to $1,600, and benefits including insurance discounts.
Cyber Trust
Organisations seeking certification may refer to the following:
(Note: Documents were last updated in October 2023)
Mapping between Cyber Trust mark and ISO/IEC 27001:2013 [PDF, 641KB]
Mapping between Cyber Trust mark and ISO/IEC 27001:2022 [PDF, 767 KB]
The Cyber Trust mark is published as Technical Reference 106 (TR 106) under the Singapore Standardisation Programme Organisations may obtain a copy of TR 106:2022 “Tiered cybersecurity standards for enterprises” from the Singapore Standards e-shop.
a. Certified organisations
Small and Medium Enterprises (SMEs) that are certified are also eligible to apply for the SME Cybersecurity Excellence award that CSA is collaborating with Association of Trade & Commerce (ATC) on.
b. How to get certified
The certification process is undertaken by certification bodies that have been appointed by CSA. Organisations may select any of the following certification bodies, please click here for contact details.
Already certified under Cloud Security Alliance STAR programme? CSA has established a Mutual Recognition Agreement (MRA) with between Cyber Trust and Cloud Security Alliance between STAR, to ease the certification progress.
c. Certification duration and mode of assessment
Cyber Trust certification is valid for a duration of 3 years, with a yearly audit. The mode of assessment will involve both review and verification of documents, as well as implementation and effectiveness. The organisation’s certification audit will be carried out by an independent assessor from the appointed certification body.
Certification charges and time needed for certification may differ according to the scope of certification. Organisations may visit the websites of the certification bodies to find out more.
d. Funding support for the Cyber Trust mark certification
To encourage organisations to adopt the Cyber Trust mark, CSA has worked with the appointed certification bodies to offer funding support for Cyber Trust mark certification. Organisations that are successfully certified can enjoy the following funding support, which will be deducted from the certification fees charged by the certification bodies:
Quality of end-points and its corresponding maximum level of funding support from CSA
Quantity of End-points | Maximum Level of Funding Support from CSA* To be deducted from the certification fees charged by certification bodies |
---|---|
1 - 10 | $500 |
11 - 20 | $725 |
21 - 50 | $850 |
51 - 100 | $1,350 |
101 - 200 | $1,600 |
* The following considerations applies to the funding support:
|
e. Cybersecurity Health Plan delivered by CISO as-a-Service (CISOaaS) Consultants
If you have already implemented good cyber hygiene, or already achieved CSA Cyber Essentials mark, you are ready to progress towards adopting a risk-based approach to cybersecurity.
Develop a cybersecurity health plan tailored for your needs and work towards national cybersecurity certification such as attaining CSA’s Cyber Trust mark.
Develop your cybersecurity health plan with your appointed CISOaaS consultant now.
f. Cybersecurity toolkits and guidance to support certification
Need help with the cybersecurity measures you can implement to improve your organisation’s cybersecurity? Check out our cybersecurity toolkits for guiding questions, templates and more.
Added benefit for certified organisations
Cyber Insurance
Cyber Trust certified organisations are eligible for discounted rates when they apply for cyber insurance with the following:
Please contact the companies listed for details.
Google Cybersecurity Certificate Scholarship
Organisations that have already appointed a certification body for Cyber Trust certification are eligible to be offered scholarships for the Google Cybersecurity Certificate. Please approach your appointed certification body for more information.
Additional information
Interested in the Cyber Essentials mark instead? Learn more about Cyber Essentials.
Unsure about the different codes, cybersecurity or data certifications required for your organisation? Learn more about Cybersecurity and data protection [PDF, 168 KB].
If your organisation is using cloud services, implement cloud security using our companion guides.