Singapore’s Cybersecurity Strategy 2026: Building Resilience in the Age of AI

Singapore International Cyber Week (SICW) has once again demonstrated why Singapore is a global leader in cybersecurity. From 12-15 October, ministers, senior officials, industry leaders and cybersecurity experts from across the globe convened for its 11th edition. The event also reflects the sustained commitment and execution of the Cyber Security Agency of Singapore (CSA), which has built SICW into one of the world’s most important cybersecurity gatherings. SICW 2026 was no exception.

This year’s event also marked a changing of the guard. It was the first since David Koh’s departure as CSA’s founding Chief Executive, following more than a decade of leadership. His legacy is considerable, but the transition to Chief Executive Gwenda Fong’s leadership has been seamless, allowing for strategic consistency.

That institutional continuity was on full display with the launch of Singapore’s Cybersecurity Strategy 2026 amidst a rapidly changing cyber landscape. As Senior Minister K Shanmugam emphasised in his opening address at SICW, Singapore must move towards more proactive cyber defence, acting earlier, at national scale and at the speed of emerging threats.

AI increases urgency of Zero Trust shift

AI presents two distinct security challenges for organisations: protecting systems against increasingly capable AI-enabled attacks, and ensuring that AI systems themselves operate securely.

The challenge of securing Singapore’s digital future was underscored by IMDA’s Singapore Digital Economy Report 2026, released on 5 October. It found nearly one in four businesses in Singapore adopted AI in 2025. Overall, Singapore’s digital economy reached S144.1 billion, reinforcing why secure-by-design architectures are now essential as AI adoption becomes core to economic growth.

This is why the new strategy is right to focus on the need to strengthen upstream protection and reduce overall exposure to all cyber threats and consequences.

Simply identifying and patching vulnerabilities faster will no longer be sufficient. Organisations must also systematically reduce the opportunities available to attackers in the first place and govern AI effectively and securely.

That means removing unnecessary internet-facing exposure, limiting access to applications and data to only authorised users and agents, and preventing a compromise in one part of an organisation leading to access across all segments of technology and business processes.

These are the fundamental principles of Zero Trust. Importantly, Singapore has already demonstrated what best practice looks like.

Through GovTech’s Government Zero Trust Architecture (GovZTA), Singapore has established an approach to securing government systems that challenges traditional assumptions about network trust and places greater emphasis on controlling access and limiting the consequences of compromise.

The opportunity now is to build on this experience and extend the architectural principles of Zero Trust to a greater extent into Singapore’s critical infrastructure and wider economy.

Partnership and implementation

Zscaler was pleased to be formally acknowledged in Singapore’s Cybersecurity Strategy 2026. We were glad to contribute to its development through our engagement and partnership with CSA in the lead-up to its publication.

Singapore’s willingness to bring government and industry together is one of its greatest strengths.

The challenge now is implementation: translating the strategy’s ambitions into security architecture and capabilities that reduce exposure, contain compromise and strengthen resilience across government, critical infrastructure and the wider economy.

There is also an important regional opportunity. As Singapore prepares to chair ASEAN in 2027, its experience with Zero Trust adoption and its new national strategy offer valuable lessons for governments across Southeast Asia seeking to accelerate their own digital transformation efforts securely. 

Zscaler is committed to supporting the implementation of Singapore’s Cybersecurity Strategy 2026. Advancing Zero Trust architecture, reducing exposure, containing compromise and enabling the secure adoption of AI will be central to strengthening Singapore’s cyber resilience.