Skip to main content
A Singapore Government Agency Website How to identify
Official website links end with .gov.sg
Secure websites use HTTPS
Look for a lock () or https:// as an added precaution. Share sensitive information only on official, secure websites.
Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if something is a scam.

Cyber Security Agency of Singapore
Press Releases

CSA Launches Internet Hygiene Portal as a One-stop Cybersecurity Platform for Enterprises

19 October 2022

CSA’s Internet Hygiene Portal (IHP) is a one-stop resource helping enterprises adopt security best practices like HTTPS and DNSSEC. Using a "Three As" approach—Awareness, Assessment, and Adoption—it provides self-check tools and a public rating table. Starting with e-commerce, this initiative helps consumers make informed choices while securing businesses against phishing and ransomware.

1              The Cyber Security Agency of Singapore (CSA) is launching the Internet Hygiene Portal (IHP) (opens in new tab), an initiative under the Singapore’s Safer Cyberspace Masterplan 2020. The IHP serves as a one-stop platform for enterprises, providing them with easy access to resources and self-assessment tools, so that they can adopt internet security best practices in their digitalisation journey. The IHP also provides visibility on the cyber hygiene of digital platforms, by publishing an Internet Hygiene Rating table with a simplified view of each digital platform’s internet hygiene. This is aimed at helping consumers make informed choices to better safeguard their digital transactions from cyber threats.

2              As Singapore builds up its digital economy and more businesses go online, cyber threats such as ransomware and phishing will remain major concerns. Many enterprises, particularly SMEs, lack awareness and/or have low adoption of internet security best practices to safeguard their domains, websites, and email servers. This puts customers of these companies at risk because their data and details of their transactions with the company may not be properly secured.

3              The IHP is one of the cybersecurity toolkits that CSA has rolled out under the SG Cyber Safe Programme. It supports enterprises via a three “A”s approach: enhance Awareness by providing guides on internet hygiene standards and best practices, facilitate Assessment via the self-initiated ‘health check’ tools for email, website, and internet connectivity; and lastly, promote the Adoption of internet security best practices.

Internet Hygiene Rating Table

4              CSA will be publishing the Internet Hygiene Rating table on a regular basis. For a start, CSA is featuring 10 popular enterprises in the e-commerce sector. The internet hygiene rating is based on the average adoption of internet security best practices, which were curated by CSA and are common globally recognised baseline internet standards and security controls. These include important internet security protocols such as: HTTPS to secure website communications between parties, DNSSEC to prevent DNS spoofing, hijacking, and cache poisoning, and DMARC which enhances email security by preventing email spoofing.

Internet hygiene

5              Subsequently, CSA intends to engage with other sectors, e.g., Banking and Finance as well as Healthcare, and similarly publish their rating on the IHP portal.


About the Cyber Security Agency of Singapore

Established in 2015, the Cyber Security Agency of Singapore (CSA) seeks to keep Singapore’s cyberspace safe and secure to underpin our Nation Security, power a Digital Economy and protect our Digital Way of Life. It maintains an oversight of national cybersecurity functions and works with sector leads to protect Singapore’s Critical Information Infrastructure. CSA also engages with various stakeholders to heighten cyber security awareness, build a vibrant cybersecurity ecosystem supported by a robust workforce, pursue international partnerships and drive regional cybersecurity capacity building programmes.

CSA is part of the Prime Minister’s Office and is managed by the Ministry of Communications and Information. For more news and information, please visit www.csa.gov.sg.