OBS_VALUE: The Cybersecurity Act 2018 is Singapore’s legal framework for the supervision and maintenance of national cybersecurity by the Cyber Security Agency of Singapore (CSA). This includes setting out measures for the protection of Singapore’s Critical Information Infrastructure (CII) and licensing of cybersecurity service providers that provides a licensable cybersecurity service specified in the Second Schedule of the Act. Under the Act, CSA currently licenses two types of cybersecurity service providers, namely those providing penetration testing and managed security operations centre monitoring services. The Act (including the recent amendments) does not require licensed cybersecurity service providers to have a commercial presence in Singapore before they can provide computer services to the domestic market. The Singapore Parliament passed the Cybersecurity (Amendment) Bill on 7 May 2024, amending the Cybersecurity Act. The Act currently only allows CSA to designate computers or computer systems as CII if the entire or part of the computer or computer system is in Singapore. However, this has also meant that CSA is currently unable to regulate a CII that is wholly located overseas. Clause 8 of the Bill allows CSA to deal with situations where a CII is supporting an essential service from overseas. Clause 8 inserts a new section 7(1A) which will allow CSA to designate and regulate such CIIs that are wholly located outside Singapore, so long as its owner is in Singapore and the computer system would have been designated as a CII under section 7(1) had it been located wholly or partly in Singapore. 