Retirement and Appointment of Chief Executive of Cyber Security Agency of Singapore

Retirement of Mr David Koh (许智贤)  

2.             Mr David Koh, 61, is retiring after 42 years of public service. He has served as the Founding CE of CSA since 1 April 2015, concurrently holding the role of Commissioner of Cybersecurity since 2018. Under his leadership over the past 11 years, CSA celebrated its tenth anniversary in April 2025, marking a decade of significant growth and development in Singapore's cybersecurity capabilities. Mr Koh has also held concurrent appointments in MDDI as Chief (Digital Security and Technology) from January 2022 to May 2026 and Chief Quantum Advisor from August 2025 to May 2026.

3.             Throughout his tenure at CSA, Mr Koh spearheaded numerous critical initiatives that strengthened Singapore's national cybersecurity framework. He led the development and refresh of Singapore's Cybersecurity Strategy in 2016 and 2021, oversaw the establishment and amendment of the Cybersecurity Act in 2018 and 2024, and established the National Cyber Defence Doctrine. His forward-thinking approach extended to emerging technologies, where he developed Singapore's approach to Artificial Intelligence security and quantum-safe migration. Mr Koh also built up the cybersecurity ecosystem through initiatives such as the CyberSG Talent, Innovation and Growth Collaboration Centre and the CyberSG R&D Programme Office. He successfully managed major incidents such as the SingHealth breach and led the Whole-of-Government (WOG) response to the UNC3886 campaign against Singapore’s Critical Information Infrastructure.

4.             On the international stage, Mr Koh established Singapore as a credible thought leader in cybersecurity through strategic engagement and diplomacy. He architected Singapore's international cyber engagement strategy, which led to the country's participation in the United Nations (UN) Group of Government Experts on ICTs security and its chairing of the UN Open-Ended Working Group on cybersecurity. He initiated the Singapore International Cyber Week in 2016, which has since grown into a premier global cybersecurity conference, drawing notable cybersecurity leaders and industry players to Singapore.   

5.             For his leadership and significant contributions to strengthening Singapore’s cybersecurity defence and capabilities, Mr Koh was awarded The Public Administration Medal (Gold) in 2017 and The Public Administration Medal (Gold) (Bar) in 2025.

Appointment of Ms Gwenda Fong (方素仪) 

6.             Ms Gwenda Fong, 48, brings over 20 years of public sector experience in technology, security and social policy roles to her new role as CE, CSA. Ms Fong has held key leadership roles in the MDDI family and was previously appointed as Deputy Secretary (Digital Society and Development) at MDDI from January 2023 to March 2026. She was appointed as CE-Designate, CSA on 1 April 2026 and will be officially appointed as CE of CSA and Commissioner of Cybersecurity on 1 July 2026.

7.             At MDDI, Ms Fong oversaw Singapore's development of an inclusive and safe digital society and led the review and development of the Digital Society Strategy, a foundational piece of work in support of Smart Nation 2.0. She oversaw Singapore’s efforts to sustain public service media entities, shore up our infrastructure of fact, and develop, operationalise and enforce several legislative levers to address various forms of online harms. She also led the strategic planning and corporate development functions in MDDI.

8.             Prior to this role, Ms Fong spent about a year in the Infocomm Media Development Authority in 2022 as Assistant Chief Executive (Strategy, Plans and Digital Readiness) where she led the strategy and research units and was responsible for developing and implementing programmes to drive digital access and adoption amongst Singaporeans.

9.             Ms Fong previously served at CSA from 2017 to 2022, where she last held the role of Assistant Chief Executive (Policy and Corporate Development). In this role, she was closely involved in the drafting and implementation of the Cybersecurity Act (2018), the refresh of the Cybersecurity Strategy in 2021 and profiling CSA’s efforts domestically and internationally to create mindshare and position Singapore as a cyber thought leader.

10.          Ms Fong has also held roles in the Ministry of Health, Ministry of Defence and the Defence Science & Technology Agency. She was awarded the Public Administration Medal (Silver) in 2025 for her contributions to public service.

11.          Mr Chng Kai Fong, Permanent Secretary (Digital Development and Information), said: “I would like to thank David for his significant contributions to MDDI and CSA over the past 11 years. David has built CSA from the ground up and set Singapore on a strong footing in cybersecurity — from establishing our national frameworks and legislative foundations, to positioning Singapore as a trusted and respected voice in international cyber diplomacy. His dedication and visionary leadership have created a strong foundation for CSA's continued success in the many years to come. I also welcome Gwenda to her new appointment and look forward to her contributions and leadership.” 

Issued by the Ministry of Digital Development and Information

About the Ministry of Digital Development and Information

The Ministry of Digital Development and Information (MDDI) drives Singapore’s digital development in four key domains — the economy, government, security, and society. MDDI oversees the development of the infocomm technology, cybersecurity, and media sectors; the Government’s digitalisation initiatives; and the national library, national archives, and public libraries. The Ministry is also responsible for effective public communications, and the Government’s information and public communication policies. Our mission is to engage hearts and minds and build a thriving digital future for all.

About the Cyber Security Agency of Singapore

Established in 2015, the Cyber Security Agency of Singapore (CSA) seeks to keep Singapore’s cyberspace safe and secure to underpin our National Security, power a Digital Economy and protect our Digital Way of Life. It maintains oversight of national cybersecurity functions and works with sector leads to protect Singapore’s Critical Information Infrastructure. CSA also engages with various stakeholders to heighten cyber security awareness, build a vibrant cybersecurity ecosystem supported by a robust workforce, pursue international partnerships and drive regional cybersecurity capacity building programmes. CSA is part of the Prime Minister’s Office and is managed by the Ministry of Digital Development and Information.