Cybersecurity Certification for Enterprises
CSA's Cyber Essentials Mark
The Cyber Essentials mark is a cybersecurity certification for enterprises that are embarking on their cybersecurity journey. It is targeted at organisations such as Small and Medium Enterprises (SMEs). Some SMEs have limited IT and/or cybersecurity expertise and resources; the Cyber Essentials mark aims to enable them to prioritise the cybersecurity measures needed to safeguard their systems and operations from common cyber-attacks.
The Cyber Essentials mark serves to recognise that enterprises have put in place good cyber hygiene practices to protect their operations and customers against common cyber-attacks.
Why should my organisation apply?
• Tailored to your enterprise’s cybersecurity needs
• Simplifies cybersecurity by prioritising the measures to focus on first
• Guides your enterprise to implement cyber hygiene measures against common cyber-attacks
• Provides recognition of your cybersecurity practices
CSA's Cyber Trust Mark
The Cyber Trust mark is a cybersecurity certification for enterprises with more extensive digitalised business operations. It is targeted at larger or more digitalised enterprises as these enterprises are likely to have higher risk levels which require them to invest in expertise and resources to manage and protect their IT infrastructure and systems. The Cyber Trust mark adopts a risk-based approach to guide enterprises to understand their risk profiles and identify relevant cybersecurity preparedness areas required to mitigate these risks.
The Cyber Trust mark serves as a mark of distinction for enterprises to prove that they have put in place good cybersecurity practices and measures that are commensurate with their cybersecurity risk profile.
Why should my organisation apply?
• Signifies a mark of distinction to recognise enterprises as trusted partners with robust cybersecurity
• Provides a pathway to international cybersecurity standards (e.g. ISO/IEC 27001)
• Provides a guided approach for your organisation to assess cybersecurity risks and preparedness
• Takes on a risk-based approach to meet your enterprise needs without over-investing
Which tier of Cybersecurity Preparedness does my organisation belong to?
There are five Cybersecurity Preparedness tiers, with 10 to 22 domains under each tier. Enterprises can use the Cyber Trust mark risk assessment framework to identify which Cybersecurity Preparedness tier is more suitable for their needs.
Cybersecurity Certification for Enterprises
CSA has developed a cybersecurity certification scheme to recognise enterprises with good cybersecurity practices. The Cyber Essentials mark recognises enterprises that have put in place cyber hygiene measures, while the Cyber Trust mark is a mark of distinction to recognise enterprises with comprehensive cybersecurity measures and practices.
The two cybersecurity certification marks were developed in consultation with industry partners such as certification practitioners, technology providers and trade associations and take into consideration the diverse organisational profiles and operational needs of enterprises in Singapore.