Cybersecurity (Amendment) Bill

My speech during the Second Reading debate on this Bill on 7 May 2024.

The Cybersecurity (Amendment) Bill seeks to extend the regulatory reach of the Cyber Security Agency of Singapore (CSA) by updating the existing Cybersecurity Act of 2018. This includes the broadening of oversight across newly classified critical information infrastructure (CII) and the introduction of stringent compliance and reporting requirements, all aimed at addressing the escalating challenges within our digital environment. 

In this age of digitalisation, cyberattacks on critical infrastructure can pose a significant threat to our national security and well-being. Examples of cyber attacks around the world abound.

Cyber attacks worldwide

In December 2015, Ukraine experienced a significant cyberattack targeting its power grid, which resulted in widespread electricity outages across several regions. This was one of the first known successful cyberattacks on a power grid. The attackers, who were sophisticated and well-coordinated, used phishing schemes to install malware on the networks of several regional electricity companies. They were able to gain control of the company’s systems and shut down substations, cutting off power for approximately 230,000 people for several hours. This incident not only disrupted everyday life but also exposed the vulnerability of essential infrastructure to cyber threats and the potential for state-sponsored cyber warfare.

In May 2017, the UK’s National Health Service (NHS) was struck by the WannaCry ransomware, a global cyberattack that infected over 200,000 computers across 150 countries. The NHS faced significant disruption as the ransomware encrypted data on infected machines, demanding payment to restore access. Approximately 19,000 appointments and operations were cancelled, and patients had to be diverted from emergency rooms which were unable to access critical digital services. The attack highlighted the importance of cybersecurity hygiene, as it exploited a known vulnerability in older Windows operating systems that had not been updated with available patches.

Here at home, in 2018, hackers infiltrated SingHealth’s healthcare system, stealing personal data of 1.5 million patients. This included information like names, addresses, and dates of birth. Additionally, medical records of 160,000 patients, including that of the Prime Minister, were also compromised. The sophistication of the attack, the type of data targeted and the resources needed for such a breach suggested that this cyberattack may have been state-sponsored. 

Each of these incidents serve as stark reminders of the chaos and danger posed by cyberattacks. They underline the need for robust cybersecurity measures and the ability to rapidly respond to and manage cybersecurity threats, particularly when critical national infrastructure is at risk.

Operational intervention by CSA

Under this Bill, the CSA is empowered to regulate, monitor and enforce compliance through penalties and directives. I would like to ask the Minister if the Bill grants the CSA, or any other national body, explicit authority to take over the operations of critical systems if their owners fail to secure them adequately, despite directions from the Authority. The current provision in Section 23 allows the Minister to direct organisations to take measures to counter serious and imminent threats but does not explicitly grant the authority to directly take over operations of critical information infrastructure. This explicit authority may be necessary in situations where immediate action must be taken to prevent or mitigate a cybersecurity threat that poses a critical security risk.

In contrast, the Bus Services Industry Act 2015 is more explicit in its wording about operational intervention. Section 30 of that Act grants the Land Transport Authority (LTA) the power to make a “step-in order” in certain circumstances. This order allows the LTA to take over the operations of a licensed bus operator or appoint a step-in operator to do so.

The Bus Service Industry Act also specifies the powers and functions of the step-in operator, such as having the same powers as the original licensee and requiring the licensee to provide access to premises, assets and employees. The Cybersecurity Act is less specific about what the emergency “measures and requirements” may entail.

Incorporating similar provisions in the Cybersecurity Act could provide a clearer legal framework for the CSA to directly intervene and take control of critical information infrastructure when necessary to protect national security or the lives of Singaporeans. This would ensure that the government has the necessary tools to respond swiftly and decisively to imminent cybersecurity threats.

In addition, while the CSA’s regulatory and enforcement roles are crucial, in instances where national security is at imminent risk, are there any additional protocols for bringing in the SAF’s Digital and Intelligence Service (DIS) to manage the cybersecurity defences of critical information infrastructure?

Does the Minister see it necessary to develop a framework that enables either the CSA or the DIS to respond rapidly and directly to imminent threats to our critical information infrastructure, ensuring that operational control can be swiftly transferred in a crisis? Having this operational backstop is desirable precisely because cybersecurity attacks have high potential severity and could unfold very quickly.

This will require the strengthening of public-private collaboration to ensure the seamless integration of state and commercial resources in fortifying our national cybersecurity infrastructure. In addition, the CSA will need to ensure it has the necessary expertise to undertake such responsibilities when called upon to do so. The agency needs to be adequately staffed and equipped with the requisite skills and technology in order to effectively manage and mitigate cybersecurity threats. Such an arrangement will be a long-run investment in our own capabilities that is worth making, both in defensive terms but also to enable public-private knowledge diffusion.

Extraterritoriality

Regarding the new sections 7(1A) and 16A(1), how will the government enforce its extraterritorial judgments on overseas providers of critical information infrastructure if the owner is not in Singapore? Can the Commissioner take enforcement action outside of Singapore? If we aren’t able to enforce the laws overseas, what purpose do these extraterritorial provisions serve?

Monitoring

In section 29A on monitoring, relying primarily on examining historical records and conducting ad-hoc inspections may not be sufficient to provide the real-time, continuous monitoring needed to keep pace with rapidly evolving cyber threats. More proactive oversight measures, potentially including direct access to providers’ systems, may be required for effective supervision. WannaCry, the global ransomware attack in 2017, rapidly spread across computer systems over seven hours, while the 2015 Ukraine power grid hack led to electricity outages lasting up to six hours. These are events that unfolded in less than one day. If we really want to monitor with a deterrent view in mind, we need to have operational integration and develop our backstop capabilities.

Conclusion

In conclusion, Mr Speaker, while the Cybersecurity (Amendment) Bill makes important strides towards enhancing our national cybersecurity posture, our approach must remain adaptable to the realities of digital warfare and capable of decisive action in times of emergencies. 

Sir, I support the Bill but I look forward to the Minister’s responses to my concerns.

Sheltered walkways outside condos

I filed related Parliamentary questions to the Minister for Transport and the Minister for National Development, which were answered on 2 April 2024. This was prompted by a situation that arose in a condominium in my constituency, Aljunied GRC. The answers may be of interest to other MCST developments which wish to have sheltered walkways built just outside their property linking to the nearby bus stop or MRT station. Here is the full text of the questions and replies.

GOVERNMENT ADVISORIES ON FUNDING BY PRIVATE DEVELOPMENTS FOR SHELTERED WALKWAYS THAT CONNECT TO NEAREST BUS STOPS

Mr Gerald Giam Yean Song asked the Minister for Transport whether LTA issues letters or advisories to residential Management Corporation Strata Titles informing them that they are expected to fund the construction of sheltered walkways that link their developments to the nearest bus stop when requested by their residents, even if such walkways are located on land that is managed by LTA.

Mr Chee Hong Tat (Minister for Transport): When commercial and residential developers request LTA to build covered linkways which do not fall under LTA’s provision guidelines, LTA has worked with these developers to fund their own covered linkways beyond their developments to existing linkways or to transport nodes. Some LTA officers had erroneously applied this practice to condominium MCSTs without considering the provisions of the Building Maintenance and Strata Management Act, and had advised a number of MCSTs incorrectly to fund covered linkways outside of their strata boundary in response to their requests. The officers should not have done so, and LTA has implemented measures to avoid such errors in future.

USE OF PRIVATE DEVELOPMENT’S MANAGEMENT OR SINKING FUNDS FOR CONSTRUCTION OF SHELTERED WALKWAYS TO NEAREST BUS STOPS

Mr Gerald Giam Yean Song asked the Minister for National Development whether management corporations of strata title developments are allowed to use management or sinking funds for the construction of sheltered walkways from their development to the nearest bus stop for the safety and convenience of their residents.

Mr Desmond Lee (Minister for National Development): A Management Corporation for a strata development may use its funds to construct sheltered walkways within the boundary of the strata-titled development. There are no provisions in the Building Maintenance and Strata Management Act for a Management Corporation to use its funds for works located outside its development boundary. For the construction of sheltered walkways outside of their development boundaries, Management Corporations may approach the Land Transport Authority, which will evaluate such requests on a case-by-case basis.

Select Committees for Ministries

Committee of Supply Debate, Parliament, 7 March 2024

Parliament currently has seven Standing Select Committees, but none of these are specific to individual Ministries. This is quite unlike many other legislatures around the world. The UK’s House of Commons, for example, has select committees for every government department like defence, home affairs and transport, to name a few. Australia’s parliament has House Standing Committees on Health, Aged Care and Sport; and on Employment, Education and Training, among others.

These Select Committees examine each Ministry’s policies, spending and administration. They are empowered to inquire into and report on any matter referred to them by the House or a Minister. The Committees may call in subject matter experts to give testimony and answer questions from Members that can inform their considerations.

Select Committees also provide a platform for Members to better understand each other’s positions and that of the government. The government may share in confidence with Committees information that shapes its policy stances. The Committees can discuss legislation or major policy changes before they are officially tabled, so that there is more room to work out compromises before each party stakes its position publicly.

After a thorough scrutiny of legislation and policies, the Select Committees can make recommendations to Parliament before Bills and Motions are debated and voted on by all MPs.

This process will lead to more informed and constructive debate, and better decision-making in Parliament. The Committees thus help to contribute to more effective governance, build political consensus and strengthen national unity.

For these reasons, I call on Parliament to set up Standing Select Committees for each Ministry or group of related ministries, consisting of MPs from all political parties represented in Parliament. They should be supported by the Parliament Secretariat and meeting minutes should be made available to all Committee members. Ministries should endeavour to engage them on a regular basis.

Licensed childminding services

Committee of Supply debate, Ministry of Social and Family Development, 6 March 2024.

Parents who are engaged in shift work often require childminding support outside of childcare centres’ operating hours, which are typically from 7am to 7pm. Many of these parents are from the lower income groups, for whom shift work is more common. 

The Forward Singapore report said that childminding service options will be expanded.

Could the Minister share further updates on this programme, including how many families have benefited from it so far?

Can MSF look into subsidising wages for childminders in order to attract more to join this scheme? 

In order to scale up the service to benefit more parents, could MSF take the lead to roll out this programme islandwide? 

What are the current efforts in promoting this service to parents, and can it be integrated into KidSTART, ComLink and related programmes for the low income?

Smoke free generation

Committee of Supply debate, Ministry of Health, 5 March 2024

The healthcare costs and lost productivity caused by smoking in Singapore has been estimated to be at least $600 million a year. 

Singapore has some of the world’s toughest anti-smoking laws. Yet, continuing to raise tobacco taxes and extending public smoking bans may be seeing diminishing returns. Stricter rules in public spaces have ironically driven smokers to light up at home or create informal smoking corners, harming their children’s health and sparking neighbour complaints about second-hand smoke.

In January 2023, the Ministry of Health stated it is reviewing international practices on cohort smoking bans. The UK plans to increase the minimum smoking age every year until eventually no person can legally buy cigarettes. New Zealand initially implemented a cohort smoking ban, but the new conservative government revoked it to fund tax cuts.

DPM Lawrence Wong stated in January 2024 that public health and not potential tobacco tax revenue loss were factors in banning e-cigarettes. I trust this principle will also apply to any government decision on a cohort smoking ban.

A generational smoking ban is specifically designed to safeguard the future, without imposing restrictions on current smokers. This forward-looking approach ensures that today’s adults can make their own choices, while laying the groundwork for a healthier legacy for their children and grandchildren.

I urge the government to implement a cohort smoking ban for all individuals in Singapore born on or after 2010. This will give us four years to prepare new smoking regulations before we see our first smoke-free generation for all children currently aged 14 and under.

Healthcare subsidies for persons with disabilities

Committee of Supply debate, Ministry of Health, 5 March 2024

Currently, Pioneer Generation, Merdeka Generation and Public Assistance cardholders receive special subsidies under CHAS. 

I would like to propose adding persons with disabilities or special needs as another group of Singaporeans to receive special subsidies under CHAS. They should also receive additional MediSave top-ups and more subsidies for intermediate and long-term care. 

All this will help persons with disabilities or special needs — and their families — to defray their medical expenses, which are likely to be larger over their lifetimes.

I would also like to suggest that MOH track the number of individuals under CHAS who are persons with disabilities or special needs, so as to better understand the healthcare expenses and needs of this group of Singaporeans.

Safe footpaths

Committee of Supply Debate, Ministry of Transport, 5 Mar 2024

Footpath safety is a concern for many of my residents. Accidents often occur along footpaths due to a lack of awareness and courtesy among pedestrians, cyclists and personal mobility device users. Some of my residents have suffered severe injuries as a result. I call on the Ministry to conduct more public safety education for all footpath users. 

For instance, cyclists should be encouraged to sound their bell when they are still some distance away from pedestrians to alert them of their approach — and not wait until they are directly behind. Pedestrians should be educated to avoid suddenly changing direction without looking over their shoulders. Cyclists who disregard pedestrian safety should be taken to task.

By promoting a culture of mutual respect and responsibility, we can make our footpaths safer and more pleasant for everyone. This is not only a matter of convenience, but also of public health and social cohesion. 

Lift Replacement Fund

Committee of Supply debate (Ministry of National Development), 5 Mar 2024

The Lift Replacement Fund (LRF) was introduced during the 2017 amendment to the Town Councils Act. It addresses the substantial, deferred costs associated with lift renewals in our ageing estates. This provision ensures minimal disruption due to lift breakdowns for our residents, notably the elderly, young children and those with mobility challenges.

Nonetheless, the current apportionment of Service and Conservancy Charges (S&CC) and government grants — 26% to the Sinking Fund (SF) and 14% to the LRF — may be precipitating a skewed emphasis towards the LRF. Looking at the 17 town councils’ latest annual reports, I notice that for many of them, their LRF is expanding at a significantly faster pace compared to their SF.

The stipulated use of the LRF may be unduly restrictive. Currently, expensive lift components like the automatic rescue device, the main controller PCB, the emergency battery operated power supply and the uninterrupted power supply can only utilise the Routine Fund, despite their considerable capital expense.

Hence, I would like to put forth three proposals to MND:

First, rebalance the funding distribution between the Sinking Fund and LRF, slightly increasing the SF’s proportion and reducing the LRF’s proportion.

Second, broaden the permissible applications of the LRF to encompass all lift components with a lifespan exceeding 10 years.

And third, permit Town Councils to transfer funds between LRF and SF to fund necessary cyclical works without compromising the original intent of setting aside adequate reserves for the two funds.

These recommendations seek a more efficient balance between addressing current exigencies and future preparations, assuring all residents benefit from dependable lift and escalator facilities.

Menopause support for female workers

Committee of Supply debate, Ministry of Manpower, 4 Mar 2024

The number of women aged 40 to 59 in the labour force has risen by 97,000 from 2012 to 2022. Many in this group of workers would be undergoing perimenopause, which can present various physical and emotional challenges that may impact their well-being and work performance. 

Awareness of the health-related impact of perimenopause on women’s well-being does not seem to be widespread in Singapore. The Straits Times, in a piece titled “Is Singapore ready for the menopause wave from a super ageing society?” interviewed women who quit their jobs or suffered through the pain at work.

This loss in productivity may ultimately be costly to businesses and the economy, not to mention the human toll it takes on female workers. Based on an NUH study, and extrapolating for the current midlife working population, as many as 388,800 women may be bearing the ill effects of perimenopause at work.

It is important for employers to recognise and accommodate these changes, and foster a supportive work environment that addresses the unique needs of these women. It is notable that the UK and Australian parliaments have convened MP-led consultations to raise awareness nationally.

In Singapore, we can start with incentives for women who turn 45 to seek pre-emptive check ups and for those we need physiotherapy for their joint and muscle pain to either subsidise the treatment or give them time off for it. 

If women are forced to cut short their working life during their menopause transition, their health and finances may worsen, and our economy will lose out on their valuable contributions. This scenario is entirely preventable.

Tradesperson Jobs

My “cut” on the Committee of Supply debate (Ministry of Manpower), 4 Mar 2024.

There are approximately 186,000 craftsmen and trades workers in Singapore. Their median salary is $2,700, and their median age is 56 years. Over 70% are foreigners. The low wages, ageing workforce and heavy reliance on foreign labour in this crucial sector is concerning.

I acknowledge the efforts by MOM, industry associations, unions and IHLs to professionalise these trades. However, attracting young Singaporeans remains a pressing challenge.

To overcome this, we first need to boost societal respect for skilled tradespersons — or “tradies”, as they are affectionately called in Australia.

Schools and trades associations can create greater public awareness about what tradies do. They are not all dirty, difficult and dangerous jobs. For example, licensed plumbers often do more supervision and inspections of plumbing works than the “dirty work” themselves.

Young people who prefer working with their hands should be encouraged to consider skilled trades instead of forcing themselves to study an academic subject they have little interest in.

Second, we need to lower the barriers for entry for Singaporeans to become licensed tradespersons. All courses and mentorship programmes leading to licensing should be more subsidised under SkillsFuture, even for workers under 40, and more places should be set aside for Singaporeans. 

Third, to raise incomes of skilled tradespersons, agencies must rigorously enforce regulations against unlicensed individuals performing tasks that are legally reserved for licensed tradespersons. This will uphold the required quality and safety standards and prevent licensed tradespersons’ earnings from being unjustly undercut by unlicensed competitors.

Sir, for avoidance of doubt, I declare that I am the director and shareholder of a company that provides technology solutions to training providers.