GovWare 2024

In today's interconnected world, the protection of sensitive information and IT assets is of paramount importance. Enterprise security encompasses a range of strategies, techniques, and processes aimed at securing data and systems against unauthorised access and potential risks. It goes beyond traditional cybersecurity measures, extending its reach to safeguarding data in transit across networks, servers, and end-users. 

Overcoming the challenges associated with enterprise cybersecurity requires a comprehensive approach. Our services assist you in identifying and protecting your organisation's crown jewels—its critical assets and data. 

ARTIFICIAL INTELLIGENCE

• ISO/IEC 42001 AI Management System
  

Information Security

• CSA Cyber Essentials Mark
• CSA Cyber Trust Mark
• Cybersecurity Risk Assessment
• ISO/IEC 20000-1 IT Service Management
• ISO/IEC 27001 Information Security Management System
• ISO IEC 27017 Security Control for Cloud Services
• SS 584 Multi Tiered Cloud Security (MTCS)
• Payment Card Industry Data Security Standard (PCI DSS)
• Threat Hunting

Governance & compliance control

• Cyber Security Code of Practice (CCoP) compliance audit
• Customised Cybersecurity Audit
• 2nd Party Service Management Audit
• Supply Chain Audits
• Vulnerability Assessment & Penetration Testing (VAPT)

Training

• Professional Certification in Business Sustainability Management** (ISO Standards: Cybersecurity track)
• CSA Cyber Essentials Mark
• CSA Cyber Trust Mark
• Fundamentals of Cybersecurity
• ISO/IEC 27001 Information Security Management Systems Awareness / Internal Auditor* / Lead Auditor
• ISO/IEC 42001 AI Management System Internal Auditor* / Lead Auditor

NOTE:

*SkillsFuture Singapore (SSG) supported course: Enjoy up to 70% course fee funding & additional support with SkillsFuture Enterprise Credit and absentee payroll. Terms and conditions apply.

**Training by TÜV SÜD and NTUC LearningHub: Enjoy up to 70% course fee funding & 90% salary support. Terms and conditions apply.

Data protection is a critical process aimed at safeguarding sensitive information from damage, loss, or corruption. In today's digital landscape, failure to protect data can lead to severe consequences, including financial losses, reputational damage, loss of customer trust, and legal liability. With organisations being subject to various data privacy standards and regulations, ensuring robust data protection measures is paramount.

At TÜV SÜD, we offer comprehensive data protection and privacy services designed to protect your information throughout its entire lifecycle, from acquisition to disposal.

Solutions

• ISO/IEC 27701 Privacy Information Management System
• ISO IEC 27018 Protection of Personally Identifiable Information in Public Clouds
• IMDA Data Protection Trustmark (DPTM)
• Global / APEC Cross Border Privacy Roles (CBPR) and Privacy Recognition for Processors (PRP) System Certifications
• EU General Data Protection Regulation

Training

• EU General Data Protection Regulation (GDPR)
• IMDA Data Protection Trustmark Awareness
• ISO/IEC 27701 Privacy Information Management Systems Awareness / Internal Auditor

The increasing prevalence of cyber-physical systems has revolutionised industries worldwide. These systems, deployed across various businesses such as manufacturing plants, energy suppliers, and railways, enhance efficiency, flexibility, and innovative business models. However, this increased connectivity also introduces a new risk landscape with escalating cyberattacks. To combat this, suppliers and system integrators must prioritise the cyber resilience of their components and systems by improving development, integration, and support processes.

Our comprehensive approach and industry experience enable us to navigate the complex landscape of industrial cybersecurity threats and provide tailored solutions to address your specific needs.

Solutions

• Automotive Cybersecurity (SAE 21434) Assessment and Certification
• IECEE-CB Scheme for Cybersecurity (CYBR)
• ISA Secure IEC 62443 Conformance Certification
• Supplier Security Audit (Industrial)
• TÜV SÜD Certification Mark (IEC 62443)
• Trusted Information Security Assessment Exchange (TISAX)
• OT Security Gap Assessment

TRAINING

• IEC 62443 Industrial Cybersecurity Foundation
• IEC 62443 In-Depth Training
• Industry 4.0 Cybersecurity Management for Operational Level

Effective cybersecurity is crucial to safeguard products ranging from consumer electronics, industrial systems and medical devices, against cyber attacks. A proactive approach enhances product security and reliability, maintain customer’s trust and ensures regulatory compliance to provide a secure and reliable user experience. 

From the initial stages of application design to its operational stage, TÜV SÜD conducts rigorous testing and evaluation to integrate security and data protection requirements on your applications effectively.

Consumer IoT

• ETSI EN 303 645, IECEE-CB Scheme
• NIST IR 8259
• UK PSTI
• IoT Security Spot Check
• CSA Cybersecurity Labelling Scheme (CLS) - Cybersecurity Labels for Singapore, Finland and German
• Cybersecurity Certified Test mark (CSC)
• Data Security for IoT devices (GDPR, DPIA)
• RED prEN 18031

Medical Devices & IVDS

• Penetration and Fuzz-Testing according to MDR, IVDR (MDCG 2019-16) / US FDA
• Vulnerability Assessment and Penetration Testing
• Source Code Reviews
• Mobile Application, Medical IoT, Thick-Client, IT and Web App testing
• Concept Evaluations according to IEC 81001-5-1, IEC TR 60601-4-5 and US FDA
• CSA Cybersecurity Labelling Scheme - Medical Device (CLS-MD)

General

• Mobile Application & Web Application Testing
• Vulnerability Assessment and Penetration Testing
• OWASP-10 Testing
• Software Quality Testing

Training

• IoT Cybersecurity Standards
• TR 64 Threat Modelling Workshop
• Cybersecurity Risk Assessment