Singapore has launched Cybersecurity Strategy 2026, setting out a whole-of-nation framework for protecting critical infrastructure, the wider digital ecosystem and emerging AI-dependent services. The strategy places greater emphasis on continuous threat hunting, national-level coordination and the use of AI to respond at the speed and scale of increasingly automated attacks.
The government will upgrade the National Cybersecurity Command Centre, or NC3, to improve situational awareness across critical sectors. The enhanced centre will combine operational information, cyber-threat intelligence and data supplied by critical information infrastructure operators and government agencies. It is intended to detect sophisticated threats earlier, support remediation of vulnerabilities and coordinate responses to major incidents.
Singapore will progressively introduce AI across NC3 and the Government Cyber Security Operations Centre. The Cyber Security Agency has already developed tools that automate the discovery and mapping of exposed digital assets and vulnerabilities, while GovTech uses AI agents to accelerate security testing. These capabilities will be extended through partnerships with critical-sector operators and technology companies.
Rather than developing a separate foundation model for every security use case, the government plans to invest in “AI harness engineering”: the capability to assess multiple models and securely connect the most suitable ones with operational tools, protected datasets and defender workflows. This approach is intended to allow systems to change as model performance and threat patterns evolve.
The strategy also includes plans for a national Protective Domain Name Service. The upstream service would prevent connections to domains already identified as malicious, reducing exposure to phishing, malware and scam infrastructure before harmful content reaches an individual device or organisation.
Cybersecurity Strategy 2026 covers quantum-related risks, ecosystem capabilities, international cooperation and workforce development alongside operational defence. It follows Singapore’s response to UNC3886, an advanced persistent threat actor that targeted the country’s telecommunications sector. Lessons from the resulting multi-agency Operation CYBER GUARDIAN informed the shift towards earlier detection and coordinated national action.
The strategy also recognises the risks created by agentic AI, including systems manipulated into taking unauthorised actions or accessing protected environments. Critical operators will therefore have to manage both conventional vulnerabilities and risks arising from autonomous software interacting with infrastructure. The government has not published a single implementation deadline for all measures; individual capabilities will be introduced progressively across agencies and critical sectors.
