Cyber-security staff may soon get clarity on skills required

CSA study aims to raise productivity and professionalism amid rise in cyber attacks

- Krist Boo

The Cyber Security Agency of Singapore (CSA) is starting a study aimed at raising the productivity and professionalism of cyber-security workers.

It may result in an outline of the competencies required of chief information security officers, or Cisos, and their teams of security executives who are in high demand, given their key role amid surging cyber attacks.

Ms Veronica Tan, director of CSA's safer cyberspace division, told The Straits Times: "For organisations, clarity in standards and desired skills for various roles will mean greater improvements in workforce competency and productivity."

The study will involve industry players, training institutions and certification bodies, she added.

CSA's plan comes as companies warm to the idea of designated cyber-security personnel, but sometimes find themselves hindered by limited budgets and a shortage of skilled talent.

Mr Nyan Tun Zaw, the first Ciso at Singapore cyber-security advisory firm Athena Dynamics, said: "The industry turnover rate for Cisos is unfortunately pretty high because it is a highly challenging and stressful job.

"When the organisation faces a security incident, this is the first person everyone looks to."

The title of Ciso, which arose in 1905 after Citibank appointed one following a cyber attack, has risen in prominence in recent years as some countries made mandatory disclosures of material cyber breaches or attacks.

There have also been high-profile cases of criminal charges taken against such officers, such as at Uber and Solar Winds.