Singapore will move towards a national Cybersecurity Professional Accreditation Framework to establish clearer standards for cybersecurity professionals, recognise their competencies and improve workforce quality.
Announced by Senior Minister of State for Digital Development and Information, Tan Kiat How, at Singapore International Cyber Week 2026. the framework is part of Singapore’s Cybersecurity Strategy 2026, which identifies a future-ready cybersecurity workforce as a national priority.
CSA will first establish a national cybersecurity competency framework defining standards across roles and proficiency levels, followed by a voluntary accreditation pilot from the second quarter of 2027.
Singapore’s cybersecurity workforce has more than doubled over the past decade, rising from 4,000 professionals in 2016 to more than 10,000 in 2025. However, increasingly sophisticated threats are placing greater demands on professionals to combine technical knowledge with practical experience, sound judgement and professional conduct.
A CSA-commissioned study by Ernst & Young found that the wide range of cybersecurity certifications can make it difficult for employers to assess competence, while professionals struggle to identify and maintain the skills needed for career progression. About 67% of stakeholders surveyed said Singapore was ready or somewhat ready to introduce a professional accreditation framework.
The proposed accreditation will complement existing certifications rather than replace them. It will assess relevant work experience, demonstrated competencies, qualifications, industry certifications and professional conduct, allowing professionals to obtain titles relevant to their specialisation.
“We are not trying to create another layer of certificates,” Tan said. “We want to build a framework that gives employers greater confidence, gives professionals greater recognition, and gives the profession a stronger common standard.”
CSA is working with the Infocomm Media Development Authority and the Skills and Workforce Development Agency to refresh and harmonise the cybersecurity track under the Skills Framework for Infocomm Technology and CSA’s Operational Technology Cybersecurity Competency Framework. The resulting framework will be updated regularly to reflect emerging areas, including AI security.
The voluntary pilot will initially involve professionals from selected government agencies and cybersecurity service providers, focusing on security operations and vulnerability assessment and penetration testing. Application fees will be waived during the pilot.
By the end of 2026, CSA will establish a Cyber Security Professional Office with the Association of Information Security Professionals to manage assessment, appeals, renewals and a public register of accredited professionals.
A Cyber Security Professional Panel and technical accreditation committees will oversee standards, approve titles and review candidates’ portfolios.
