Skip to main content
A Singapore Government Agency Website How to identify
Official website links end with .gov.sg
Secure websites use HTTPS
Look for a lock () or https:// as an added precaution. Share sensitive information only on official, secure websites.
Service Advisory

Due to a worldwide Microsoft Outlook disruption, emails to and from CSA may be delayed. We apologise for the inconvenience.

Cyber Security Agency of Singapore
Events

Entities of Special Cybersecurity Interest (ESCIs)

13 November 2026

The provisions for Entities of Special Cybersecurity Interest (ESCIs) under the Cybersecurity (Amendment) Act 2024 came into force on 30 October 2026. The ESCI regime enables CSA to designate and regulate entities that perform functions or hold data of national importance, strengthening the cybersecurity and resilience of their systems.

Graphic on strengthening cybersecurity for entities of national importance.
Three reasons what this mean for ESCIs.

Entities of Special Cybersecurity Interest (ESCIs) 

The provisions relating to Entities of Special Cybersecurity Interest (ESCIs) under the Cybersecurity (Amendment) Act 2024 came into force on 30 October 2026. 

The ESCI regime enables the Cyber Security Agency of Singapore (CSA) to designate and regulate entities that perform functions or hold data of national importance, where a cybersecurity incident could have significant detrimental effects on Singapore's national interests. 

Under the regime, CSA may designate such entities as ESCIs and impose cybersecurity obligations to strengthen the protection and resilience of their systems. 

Cybersecurity Obligations for ESCIs 

Designated ESCIs are subject to cybersecurity obligations, including: 

  • Provision of Information: Providing CSA with information on their computer systems. 

  • Compliance with Written Directions: Complying with written directions issued by CSA to address cybersecurity risks. 

  • Cybersecurity Incident Reporting: Reporting prescribed cybersecurity incidents to CSA. 

Strengthening Singapore's Cyber Resilience 

The implementation of the ESCI regime marks another step towards safeguarding Singapore's national interests and strengthening its cybersecurity posture. 

CSA will continue to work closely with designated ESCIs to strengthen cybersecurity resilience and protect functions and data of national importance.