Singapore Cybersecurity Act and Critical Information Infrastructure Compliance Corporate Training
Learn the Cybersecurity Act duties, incident reporting, and audit readiness for critical infrastructure teams.
This instructor-led program gives your teams a working command of Singapore's Cybersecurity Act, from the 2018 Act and its 2024 amendments to CII designation, owner duties, incident reporting, codes of practice, and audit readiness. Your team will develop practical skills through guided labs, evidence workshops, and a capstone compliance review, so every participant can protect critical information infrastructure and demonstrate compliance.
Instructor-led group trainingVirtual / on-site / off-site10 languagesDelivered inEnglish, Spanish, Mandarin, German, Arabic, Portuguese, Hindi, French, Japanese, Italian100+ countriesWe have delivered inUnited States, United Kingdom, India, Canada, Germany, France, Netherlands, UAE, Saudi Arabia, Singapore, Australia, Japan, Brazil, South Africa and 90+ more countries
How we build a CII-compliant security team
The Edstellar CYBERSECURITY Capability Model
Assess compliance gaps
Skill checks map your team's grasp of the Act, CII duties, and reporting obligations.
Standardize Act duties
Your teams learn one consistent interpretation of owner duties, notices, and directions.
Practice CII labs
Guided labs rehearse incident reporting, evidence building, and audit walkthroughs.
Measure audit readiness
Lab checkpoints and a capstone review prove compliance skills you can report.
Scale control frameworks
Standard playbooks extend Act duties across business units and vendors.
Need more than one program?Get a group quote
Trusted as a Leading Corporate Training Provider by
Program Overview: What is Singapore Cybersecurity Act and Critical Information Infrastructure Compliance Corporate Training?
Singapore Cybersecurity Act & Critical Information Infrastructure Compliance Corporate Training is Edstellar's instructor-led compliance program for security, legal, and operations teams accountable for Critical Information Infrastructure. It covers the Cybersecurity Act foundations, CII designation and owner duties, incident reporting, codes of practice and audit readiness, and control frameworks for CII protection. Participants learn to operate confidently under the Act's obligations.
Training is scenario-driven from the first module. Participants work through designation decisions, owner-duty mapping, and incident-reporting timelines in facilitated case exercises, then pressure-test their audit readiness against the Commissioner's codes of practice. Instructors coach each team on evidence, documentation, and response discipline, giving direct feedback on every exercise. The program closes with a five-hour capstone where the team completes a full CII compliance review.
Non-compliance under the Cybersecurity Act is not a paperwork issue: missed reporting windows, weak owner-duty coverage, and untested controls carry real regulatory exposure. Many teams know the Act exists but cannot say which of their systems are CII or what their next audit will find. This program turns regulatory text into operational readiness.
The capstone leaves each team with an artifact regulators respect: a complete CII compliance review covering designation status, owner duties, incident-reporting procedures, and control evidence mapped to the codes of practice. Instructors stress-test the review the way an auditor would, so the team's next inspection arrives on familiar ground instead of as a surprise.
Upskill your teams with a program built around your training needs. The curriculum focuses on collaboration between operations, security, compliance, and audit functions, building shared capability that lifts team performance on the duties the Act demands.
What's Included in this Workshop for Your Enterprise Teams
- 1
Act & amendments walkthrough
Trace the 2018 Act and 2024 amendments duty by duty.
- 2
CII duties deep dive
Map designation criteria to owner obligations and notices.
- 3
Incident reporting labs
Draft and file simulated CSA notifications with coaching.
- 4
Audit evidence workshops
Build evidence packs that survive regulatory audits.
- 5
Capstone compliance review
Run a full gap assessment and present the roadmap.
- Instructor-led delivery with hybrid scheduling options
- Guided labs in every module with instructor coaching
- Capstone compliance review with team feedback
- Flexible scheduling around your business calendar
- Lab guides and evidence templates included
- Group size and batches set along with you
Build your team's skills. Anywhere in the world.
Real-world use cases
from day one
Instructor-led training
for your teams
Delivered globally
in 100+ countries
Enterprise Training Solutions Customized for Your Company
One partner for instructor-led corporate training, delivered the way your teams work.
Request a Training Quote- Customized Training Delivery
- Scale Your Training: Small to Large Teams
- In-person Onsite, Live Virtual or Hybrid Training Modes
- Plan from 2000+ Industry-ready Training Programs
- Hands-On Labs on Live Infrastructure, Led by Industry Experts
Singapore Cybersecurity Act and Critical Information Infrastructure Compliance Course Topics and Program Outline
Six modules move from the Cybersecurity Act and its 2024 amendments through CII duties, incident reporting, audit readiness, and control frameworks, closing with a capstone compliance review.
Built by Edstellar with cybersecurity compliance practitioners
Built by practitioners who run CII compliance and regulatory audits in production, shaped around your stack and use cases.
Skill checks baseline your team's knowledge of the Cybersecurity Act, CII duties, and incident reporting before training begins.
Instructor sessions cover the 2018 Act, 2024 amendments, CII designation, and owner duties with guided walkthroughs.
Guided labs rehearse incident notifications, audit evidence packs, and CCoP compliance checks in realistic scenarios.
A tabletop breach exercise and capstone compliance review turn Act duties into practiced, reportable capability.
From Act fundamentals to a capstone compliance review, every duty is practiced in guided labs and audited exercises.
Delivered as
Delivered as a hybrid program of live instruction and guided labs, scheduled around your team's calendar in flexible batches.
Build a plain-language duty map of the Act: list who the 2018 Act and 2024 amendments cover and what each provision requires, checked against instructor guidance.
learna)Origins and purpose of the Cybersecurity Act 2018
b)2024 amendments: expanded scope and new duties
c)The Cyber Security Agency of Singapore: powers and functions
d)Key definitions: CII, CII owners, cybersecurity incidents
Complete a designation checklist: assess a sample infrastructure against CII criteria and list the duties that designation would trigger.
learna)CII designation criteria across the 11 sectors
b)Duties of CII owners: protection, audits, and exercises
c)Statutory notices and Commissioner directions
d)Licensees and service providers in scope
Draft and submit a simulated CSA incident notification from a live breach scenario, with instructor review of timelines and data completeness.
practicea)Incident categories and severity classification
b)Reporting timelines and notification requirements
c)Preparing incident reports: required data fields
d)Lab: draft and file a simulated incident notification
Build an audit-readiness evidence checklist for a sample CII environment: policies, logs, and control artifacts mapped to CCoP clauses.
practicea)Cybersecurity Codes of Practice (CCoP) obligations
b)Mandatory cybersecurity audits and assessments
c)Evidence collection for audit readiness
d)Documentation: policies, logs, and change records
e)Lab: build an audit-readiness evidence checklist
Run a tabletop breach exercise: coordinate detection, containment, notification, and recovery decisions across a simulated CII team.
applya)Mapping Act duties to control frameworks
b)Asset inventory, access control, and network segmentation
c)Third-party and supply-chain risk controls
d)Tabletop exercise: respond to a CII breach scenario
Conduct a full CII compliance review of a simulated environment, then present your gap assessment and remediation roadmap for instructor feedback.
applya)Gap assessment against the Act and CCoP
b)Prioritizing remediation actions by risk
c)Building a compliance roadmap and reporting pack
d)Capstone lab: full CII compliance review with instructor feedback
Customize this program tailored to your team?
Tell us your training needs: what your team already works with, the level they’re at, and the topics you want them to focus on. We’ll adjust the modules, duration and hands-on labs, and send you a customized outline for your group.
Key Skills and Outcomes Your Team Will Gain
Your team leaves with the competencies to meet Cybersecurity Act duties in practice: reading the statute, classifying and reporting incidents, building audit evidence, and leading compliance reviews.
Interpret the Cybersecurity Act
Read the 2018 Act and its 2024 amendments with confidence: scope, duties, notices, and how each provision applies to your infrastructure.
Apply CII designation criteria
Assess whether infrastructure meets CII designation criteria across the 11 sectors and identify the duties designation triggers.
Meet incident reporting timelines
Classify cybersecurity incidents by severity and prepare complete CSA notifications within the required reporting timelines.
Assemble audit evidence packs
Collect policies, logs, and control artifacts into audit-ready evidence mapped to the codes of practice.
Map duties to control frameworks
Translate statutory duties into operational security controls across assets, access, networks, and third parties.
Manage third-party cyber risk
Apply supply-chain and vendor risk controls that extend CII protection duties to service providers and partners.
Lead a compliance gap review
Run a full gap assessment against the Act and codes of practice, then prioritize a risk-based remediation roadmap.
Teams that Benefit from this Singapore Cybersecurity Act and Critical Information Infrastructure Compliance Group Training
This group training is built for teams responsible for critical information infrastructure in Singapore who must meet Cybersecurity Act duties. Content adapts to each cohort's roles, sectors, and experience, so every group practices the compliance workflows it owns.
Run CII duties with operational confidence.
Operations teams that keep critical systems running learn to meet Cybersecurity Act duties without disrupting service. Labs rehearse the notification, evidence, and response steps these teams own.
Workflow friction
- Unclear duty ownership across shifts
- Reporting delays during real incidents
- Audit requests landing with no evidence ready
How the program helps
- Duty checklists that fit shift operations
- Faster, cleaner incident notifications
- Audit evidence built into daily routines
Practice use cases
- Incident notification drills
- Duty mapping labs
- Evidence checklists
- Breach tabletops
Prove Cybersecurity Act compliance to the regulator.
Risk and compliance teams learn to translate the Act's duties into verifiable controls and reporting packs. Exercises focus on documentation quality and timeline discipline.
Workflow friction
- Ambiguous duties across business units
- Scattered evidence before audits
- Inconsistent incident reporting quality
How the program helps
- Defensible compliance positions for CSA
- Consistent duty interpretation across units
- Reporting packs ready for regulators
Practice use cases
- Compliance gap reviews
- Reporting pack labs
- Duty interpretation drills
Turn statutory duties into working security controls.
Security teams map the Act and codes of practice to concrete controls: asset inventories, access management, segmentation, and monitoring. Labs harden a sample CII environment control by control.
Workflow friction
- Duties stated in law, not in controls
- Legacy systems hard to segment
- Vendor risk outside direct control
How the program helps
- Controls mapped directly to Act duties
- Stronger detection and response posture
- Third-party risk controls in place
Practice use cases
- Control mapping labs
- Segmentation workshops
- Vendor risk reviews
Verify CII compliance with defensible evidence.
Legal and audit teams learn to evaluate CII compliance the way the regulator does: evidence trails, duty coverage, and documentation standards. Exercises rehearse audit walkthroughs.
Workflow friction
- Evidence spread across teams and tools
- Audit scope missing statutory duties
- Inconsistent documentation standards
How the program helps
- Evidence standards that survive audits
- Clear duty coverage in audit scope
- Consistent audit walkthrough practice
Practice use cases
- Audit walkthrough labs
- Evidence review drills
- Duty coverage checks
Cohorts are grouped by function and sector so labs mirror the duties your teams actually carry.
Prerequisites: This program benefits teams who operate, secure, audit, or advise critical information infrastructure in Singapore. No prior experience with the Cybersecurity Act is required; familiarity with basic IT or security concepts helps but is not mandatory. Every cohort adapts to your sector, tools, and compliance context.
Security Analyst to CII Compliance Lead
Tracks how team members progress from basic Act literacy to advanced CII compliance practice across the program's learn, practice, and apply phases.
A program that grows with cybersecurity careers, from first exposure to the Cybersecurity Act to confident CII compliance practice.
Mixed cohort, or several teams at once?
We can tailor the training to different teams, roles, and experience levels within the same program.
Certificate of Training Completion.
On successful completion, employees receive an Edstellar course completion certificate, recognizing their commitment to ongoing learning and professional development. It validates the skills they have built and motivates them to keep growing and contribute to organizational success.
Earned, not attended. Awarded on completion of all hands-on labs and the capstone project.
Training Delivery Modes: Virtual, Onsite and Hybrid
Every session is instructor-led, with guided labs in all delivery formats. We schedule around your teams and adapt the labs to your CII environment.
Hybrid Training
Instructor-led sessions mix onsite and virtual delivery with guided labs throughout. Teams work through Cybersecurity Act scenarios while the instructor coaches, reviews, and keeps compliance practice sharp. Hybrid keeps scheduling flexible without losing live interaction.
- Live instruction across onsite and virtual sessions
- Guided labs with instructor coaching throughout
- Cohort split to match shift and sector groups
- Same curriculum and evidence templates everywhere
Onsite Training
Onsite delivery brings the instructor and the full lab program to your location. Teams train together on your premises with CII scenarios tailored to your environment, ideal for operations and audit groups that collaborate in person.
- Instructor delivers the full program at your office
- Labs tailored to your CII environment onsite
- Team-wide sessions for operations and audit groups
- Scheduling set around your business calendar
Live Virtual Training
Live virtual sessions deliver the complete program through instructor-led online classes with real-time coaching. Guided labs run in shared virtual workspaces, so distributed teams get the same hands-on practice as onsite cohorts.
- Live instructor-led online sessions in real time
- Guided labs in shared virtual workspaces
- Flexible batches across time zones
- Same curriculum and coaching as onsite delivery
Need a training format that works for your team?
Full days, half days across weeks, or split by module. Tell us the delivery window and we schedule the cohort around it.
Frequently Asked Questions
Share your team size, timelines, and delivery preference, and we will send a detailed per-group quote with batch options.
Yes. A short discovery call maps your CII exposure, roles, and timelines so we tailor the labs before training begins.
Yes. Instructor-led live virtual sessions include the same guided labs, with flexible scheduling across time zones.
Yes. Onsite delivery brings the instructor and labs to your location for teams that train best together.
The program runs 24 hours of instructor-led training across 6 modules, scheduled in batches that fit your calendar.
Question not answered here?
Put it in the request. A training specialist answers it directly, within one business day.
Where this Training Fits in Your Team's learning path.
Singapore's Cybersecurity Act places duties on owners of critical information infrastructure. Your team learns cyber basics and critical infrastructure protection first. This course covers the Act, and the last step moves to MAS TRM, which applies to financial institutions running critical systems.
Why Choose Edstellar as Your Singapore Cybersecurity Act and Critical Information Infrastructure Compliance Corporate Training Provider
Edstellar delivers this program as instructor-led hybrid training for enterprise teams: tailored labs, expert practitioners, and measured outcomes that move compliance readiness.
EXPERT TRAINERS
YEARS DELIVERING
ORGANIZATIONS TRAINED
CERTIFIED
Tailored
Every cohort's labs, scenarios, and evidence templates are tuned to your sector, CII footprint, and compliance priorities.
Proven Methodology
Concise instruction followed by guided labs and reviews, a repeatable method that turns statutory duties into practiced workflows.
Practice-Based Learning
Six modules of guided labs, evidence workshops, and a capstone review keep your team practicing compliance, not just reading it.
Expert Trainers
Practitioners who work with regulated infrastructure and regulatory audits lead every session and review your team's work.
Global Scale
One consistent program delivered across your offices worldwide, with local scheduling and consistent reporting.
Measurable Outcomes
Lab checkpoints and a capstone compliance review prove skill gains you can report to leadership and the board.
Connect Singapore CII Duties With Coordinated Controls and Incident Evidence
Edstellar develops CII compliance capability through designation, control, and incident scenarios. Participants examine infrastructure responsibilities, notification decisions, and audit evidence before reviewing a simulated environment. Feedback focuses on traceable duty-to-control mapping, coherent coordination, and a remediation roadmap that clearly distinguishes supported findings from unresolved questions.
- Step 01
Consult
We explore infrastructure ownership, cybersecurity responsibilities, and regulatory familiarity to identify gaps in CII designation analysis, incident coordination, control mapping, and evidence preparation.
- Step 02
Plan
Cybersecurity Act foundations lead into designation and owner duties, incident reporting, codes of practice, and control frameworks before a complete simulated compliance review.
- Step 03
Align
Critical-infrastructure cybersecurity and assurance expertise supports security, operations, legal, and audit teams, connecting regulatory concepts with their distinct operational and oversight roles.
- Step 04
Customize
A fictional infrastructure environment and breach timeline provide realistic designation and response cases without revealing sensitive architecture or confidential incident information.
- Step 05
Execute
Teams apply designation checklists, coordinate tabletop response decisions, and examine control evidence, receiving feedback on responsibilities, notification reasoning, and supported findings.
- Step 06
Evaluate
We assess the compliance review for traceable duties, coherent incident decisions, evidence-backed gaps, and clearly owned remediation that addresses the simulated environment.
Also from Edstellar
Talent assessments
Psychometric, behavioral, leadership and 360-degree assessment.
→Training needs analysis
Needs analysis, gap identification, and a training roadmap.
→L&D consulting
Learning strategy, content, technology and ROI measurement.
→OD consulting
Org design, succession planning and cultural change.
→Managed training services
Training outsourcing, vendor management, logistics and administration.
→Coaching solutions
Executive and manager coaching that keeps skills in use.
Start an RFP shaped to your needs.
Answer three quick questions about team size, scope, and how often you need the program run, then send the request from the last step. Everything you choose travels with it, so you only fill this in once.
How many team members need training?
Singapore Cybersecurity Act & Critical Information Infrastructure Compliance Corporate Training Training Packages & Pricing
Where L&D holds an annual budget, license packages price the whole year at once instead of raising a purchase order per workshop. Hours and licenses are pooled across teams, programs and locations, so unused capacity is not stranded in one department.
Starter
120
trainee licenses64 hours of group training
Tailored for SMBs
Growth
320
trainee licenses160 hours of group training
Ideal for growing SMBs
Enterprise
800
trainee licenses400 hours of group training
Designed for large corporations
Custom
Unlimited
trainee licensesDuration set by the rollout
Multi-region and multi-year
Training Packages & Pricing
Choose the training format that works for your team. Pricing is customized based on your requirements, cohort size, and delivery needs.
Request Singapore Cybersecurity Act and Critical Information Infrastructure Compliance Training for Your Team
Share your team size, CII exposure, and timelines to receive a tailored training plan and quote. Book a discovery call to discuss your goals; we confirm availability and respond with a detailed proposal.