Parliament of Singapore

“ Without prejudice to subsection (4) , the licensing officer may refuse to grant a licence to a person or renew the licence of a person if, in the opinion of the licensing officer—
(a) where the person is an individual, the individual is not a fit and proper person to hold or to continue to hold the licence; (b) where the person is a business entity, the business entity is not a fit and proper person to hold or to continue to hold the licence; or (c) it is not in the public interest to grant or renew the licence, or the grant or renewal of the licence may pose a threat to national security. ”

“ An applicant for the grant or renewal of a licence must, at the request of the licensing officer, provide such further information or evidence that the licensing officer may require to decide the application. ”

“ Any person who provides any licensable cybersecurity service is not entitled to bring any proceeding in any court to recover any commission, fee, gain or reward for the service provided unless, at the time of providing the service, the person is the holder of a valid cybersecurity service provider’s licence.
Financial penalty
32.— (1) This section applies where a licensee—
(a) contravenes a provision of this Part, which contravention is not an offence; or (b) fails to comply with any condition imposed by the licensing officer on the licence. ”

“ An investigation officer may, without payment, take possession or make copies of any document (or any part of it) furnished under subsection (1) , for further investigation.
(6) Any person who—
(a) refuses to give access to, or assaults, obstructs, hinders or delays, an investigation officer in the discharge of the investigation officer’s duties under this Act; (b) wilfully misstates or without lawful excuse refuses to give any information or produce any document required by an investigation officer under subsection (1) ”

“ Every incident response officer, when exercising any of the powers under this Part, must declare the incident response officer’s office and must, on demand, produce to any person affected by the exercise of that power such identification card as the Commissioner may direct to be carried by the incident response officer when exercising such power. ”

“ The incident response officer must specify in the notice mentioned in subsection (2) (b) —
(a) the time and place at which any record, document or copy is to be produced or any information is to be provided; and (b) the manner and form in which it is to be produced or provided. (4) A statement made by a person examined under this section must—
(a) be reduced to writing; (b) be read over to the person; (c) if the person does not understand English, be interpreted for the person in a language that he or she understands ”

“ A document permitted or required by this Act to be served on a partnership (other than a limited liability partnership) may be served—
(a) by giving it to any partner or other like officer of the partnership; (b) by leaving it at, or by sending it by prepaid registered post to, the partnership’s business address; (c) by sending it by fax to the fax number used at the partnership’s business address; or (d) by sending it by email to the partnership’s email address. ”

“ For the purposes of establishing an Appeals Advisory Panel, the Minister may do all or any of the following:
(a) determine, and from time to time vary, the terms of reference of the Appeals Advisory Panel; (b) appoint persons possessing particular technical skills or specialised knowledge to be the chairperson and other members of an Appeals Advisory Panel; (c) at any time remove the chairperson or other member of an Appeals Advisory Panel from such office ”

“ The Minister may at any time, by order in the Gazette, amend the First or Second Schedule.
(2) The Minister may, in any order made under subsection (1) , make such transitional, incidental, consequential or supplementary provision as may be necessary or expedient.
(3) Any order made under subsection (1) must be presented to Parliament as soon as possible after publication in the Gazette. ”

“ LICENSABLE CYBERSECURITY SERVICES
1. The following cybersecurity services are licensable cybersecurity services for the purposes of this Act:
(a) managed security operations centre (SOC) monitoring service; (b) penetration testing service. 2. ”