The Cyber Security Agency of Singapore (CSA), in collaboration with the Infocomm Media Development Authority (IMDA), has announced a mandatory upgrade to the cybersecurity requirements for residential routers under the Cybersecurity Labelling Scheme (CLS).
Under this update, the baseline requirement will be raised from CLS Level 1 to CLS Level 2, reflecting Singapore’s efforts to enhance device security in response to evolving cybersecurity threats, particularly those related to encryption and authentication vulnerabilities exploited in global botnet attacks.
Key Changes
- Enhanced Security Measures
In addition to the basic password and software update requirements under CLS Level 1, CLS Level 2 introduces stricter requirements, including secure communication protocols and stronger authentication mechanisms. - Improved Data Protection
New requirements for the secure storage of sensitive data are introduced to better safeguard user privacy. - Transition Timeline
The updated requirements are expected to be fully enforced by 31 December 2027.