Singapore | EN

Cybersecurity Code of Practice (CCoP) audit

Ensuring compliance to the Cybersecurity Act
Pictogram in .SVG for Cybersecurity

What is the Cybersecurity Code of Practice (CCoP) Audit?

The Cybersecurity Act 2018 provides the framework for protecting Critical Information Infrastructure (CII) against cybersecurity threats and prevent, manage and respond to cyber incidents.

In accordance to the Cybersecurity Act, the Cyber Security Agency of Singapore (CSA) has published the Cybersecurity Codes of Practice (CCoP) for owners of Critical Information Infrastructure to safeguard their critical infrastructure from the ever-evolving threat landscape and the rapid technological changes. On 4 Jul 2022, after several rounds of consultations and feedback from the industry, CSA published CCoP version 2 to enhance the defensive capabilities of CII owners against sophisticated Tactics, Techniques and Procedures (TTPs) used by attackers.

A Cyber Security Code of Practice (CCoP) compliance audit can help CII owners comply to the cybersecurity framework outlined in the Cybersecurity Act.

Who is CCoP Audit for?

CCoP audit is applicable to computer systems that are designated as CII by the government. Under the Act, the identified CII sectors are services related to Energy, Info-Communications, Water, Healthcare, Banking and Finance, Security and Emergency services, aviation, land transport, maritime, Functioning of Government and Media.

Get started with TÜV SÜD

Start your CCoP compliance audit journey with us today.

TÜV SÜD is a Globally Trusted Regulatory Audit Provider

TÜV SÜD is a qualified subject-matter expert and has extensive experience in carrying out independent testing, inspection and certification for our clients worldwide. TÜV SÜD also conducts risk assessments and gap analysis aligning and complying with legal and regulatory requirements.

TÜV SÜD's Cybersecurity Code of Practice Audit Services

The cybersecurity services team takes a holistic approach considering the CCoP for CII and sector specific agency requirements. We will also consider Cybersecurity Act (CSA) guidelines, procedures and processes to provide extensive coverage for greater cyber resilience.