Singapore to Establish National Accreditation Framework to Raise Cybersecurity Professional Standards

1. [Singapore, 13 October 2026] The Cyber Security Agency of Singapore (CSA) will take steps towards a national-level Cybersecurity Professional Accreditation Framework to establish clear professional standards, recognise the competencies of cybersecurity professionals, and raise the overall quality of Singapore's cybersecurity workforce. The framework will provide a common basis for assessing professional competence, taking into account technical knowledge, practical experience and professional conduct. The initiative was announced by Senior Minister of State for Digital Development and Information, Mr Tan Kiat How, at the Singapore International Cyber Week 2026. 

2. The initiative is part of Singapore’s Cybersecurity Strategy 2026, which identifies the development of a future-ready cybersecurity workforce as a key national priority. CSA will first establish a national cybersecurity competency framework to define professional standards across different cybersecurity roles. This will be followed by a voluntary accreditation pilot from the second quarter of 2027, involving cybersecurity professionals from selected organisations.  

Raising Professional Standards in a More Demanding Cyber Environment 

3. Singapore’s cybersecurity workforce has grown significantly over the past decade, with the number of cybersecurity professionals more than doubling from 4,000 in 2016 to over 10,000 in 2025. As Singapore becomes increasingly digitalised, a capable and trusted cybersecurity workforce is essential to safeguarding our economy, critical infrastructure and digital way of life.  

4. At the same time, increasingly sophisticated and challenging cyber threats are raising the demands placed on cybersecurity professionals. Beyond technical knowledge, professionals need to develop deeper practical skills and the ability to exercise sound professional judgement, while keeping pace with new technologies and evolving threats. 

5. To better understand how Singapore can strengthen professional standards, CSA commissioned a study by Ernst & Young in 2024-2025. The study found that the wide range of cybersecurity certifications can make it challenging for employers to assess the professional competencies, while cybersecurity professionals themselves find it difficult to identify and upkeep the skills needed for their roles and career progression. It also identified the need for a common framework for cybersecurity competence that brings together technical knowledge, practical experience, and professional ethics. Existing certifications, while valuable, do not provide a holistic assessment across all these areas. About 67% of stakeholders surveyed indicated that Singapore was ready or somewhat ready to introduce a professional accreditation framework. 

6. The proposed framework seeks to address these challenges by providing a more consistent and holistic basis for recognising professional competence. It will complement existing industry qualifications and certifications, while placing greater emphasis on demonstrated competencies, relevant experience and professional conduct. For cybersecurity professionals, it will provide formal recognition of their expertise and support career development. For employers, it will offer greater confidence in assessing the capabilities of cybersecurity professionals.  

Establishing National Competency Standards 

7. As a first step, CSA is working with the Infocomm Media Development Authority (IMDA) and Skills and Workforce Development Agency (SWDA) to establish a national cybersecurity competency framework that covers different cybersecurity roles and proficiency levels.  

8. This will involve a refresh and harmonisation of the cybersecurity track under the Skills Framework for Infocomm Technology (SFw for ICT) and CSA’s Operational Technology Cybersecurity Competency Framework (OTCCF). The new competency framework will define the knowledge, skills and abilities that cybersecurity professionals should demonstrate at each stage of their careers and will be updated regularly to reflect evolving industry needs and emerging areas (e.g. AI security). 

Recognising Professional Competence through Accreditation 

9. Building on these competency standards, the Cybersecurity Professional Accreditation Framework will enable cybersecurity professionals to seek professional titles relevant to their areas of specialisation. Accreditation will take into consideration a combination of relevant work experience, demonstrated competencies, qualifications and industry certifications, as well as professional conduct. 

10. CSA will pilot the Professional Accreditation Framework from the second quarter of 2027. Participation in the pilot will be voluntary, with application fees waived for the pilot’s duration. The pilot will initially involve cybersecurity professionals from selected government agencies and cybersecurity service providers, focusing on specialisations such as security operations and Vulnerability Assessment & Penetration Testing (VAPT). 

11. To support the implementation of the framework, CSA will establish the following bodies by the end of 2026: 

    1. Cyber Security Professional Office (CSPO): The CSPO, to be established in collaboration with the Association of Information Security Professionals (AiSP), will manage the end-to-end accreditation process, including assessment, appeals, and renewal, and maintaining a public register of accredited professionals. 

    2. Cyber Security Professional Panel (CSPP): Comprising senior representatives from government, industry and academia, the CSPP provides strategic oversight, guides the development of professional standards, and approves the award of professional titles to individuals. 

    3. Accreditation Committees: Comprising leading technical experts across the cybersecurity specialisations, the Committees develop and periodically review professional standards and assessment criteria to ensure they remain relevant with evolving cybersecurity practices and technologies. They are also involved in portfolio reviews and interviews for candidates applying to professional titles. 

12. More information on the accreditation standards, eligibility requirements, assessment process, and how to apply will be provided from March 2027 onwards at www.csa.gov.sg ↗ (opens in new tab).