Singapore outlines cyber insurance approach for public agencies and commercial market
Singapore does not require public sector agencies or statutory boards to buy commercial cyber insurance as it manages cyber risk through broader prevention, detection, response, and recovery measures. The government also says cyber insurance is gaining acceptance among companies in Singapore and the region, while dispute resolution capacity for related claims remains in place through FIDReC.
Highlights
- Singapore's public sector agencies are not mandated to buy commercial cyber insurance, instead prioritizing prevention, detection, response, and recovery capabilities.
- MAS actively monitors cyber insurance market developments and engages with the industry to support sound market growth as corporate adoption rises in Singapore and the region.
- FIDReC has handled cyber insurance disputes in recent years, with trained adjudicators supporting sector resilience without mandating commercial cyber coverage for public agencies.
Government stance and market oversight
As reported by the Monetary Authority of Singapore, public sector agencies, including statutory boards, are not required to procure commercial cyber insurance. Instead, the government says it uses a multi-pronged approach to cyber risk management, including investment in prevention, detection, response, and recovery capabilities.In an oral reply to a parliamentary question, Alvin Tan, speaking on behalf of MAS chairman Gan Kim Yong, says the central bank follows developments in cyber insurance through its engagements with the industry. MAS says this monitoring helps it support the sound development of the cyber insurance market as adoption grows among companies in Singapore and the wider region.
Dispute handling and sector implications
For dispute resolution, the government says the Financial Industry Disputes Resolution Centre has adjudicators with the skills and expertise to handle cases involving consumers and small businesses in the financial sector. It adds that these adjudicators undergo regular training to stay current with emerging issues and industry developments.The reply also says FIDReC has handled cyber insurance disputes in recent years. That position suggests Singapore is focusing on strengthening operational resilience and market capability, rather than mandating commercial cyber cover across the public sector.
In our earlier article on the estimated economic cost of Russia-linked hostile activity against the UK, we outlined claims that cyber incidents and other disruptive actions could be costing the economy billions of pounds each year. We also noted concerns about reporting gaps and calls for a more consistent framework to measure these losses, alongside proposals for regular public assessments and stronger cyber-resilience policies.