Update on Cyber Security Agency's Investigations into Computer Security Initiative Consultancy

Ms He Ting Ru asked the Minister for Communications and Information whether he can provide an update on the Cyber Security Agency’s investigations into a local company, Computer Security Initiative Consultancy (COSEINC), that has been added to an entity list by the US Department of Commerce.

Ms He Ting Ru asked the Minister for Communications and Information (a) whether the Government or related agencies have procured any services or products from a local company, Computer Security Initiative Consultancy (COSEINC); and (b) if so, what is the nature of the contract awarded to COSEINC.

Sir, in November 2021, the US Department of Commerce placed several companies on the Bureau of Industry and Security’s Entity List, including a local company, Computer Security Initiative Consultancy, also known as COSEINC. The effect of being placed on this List means that US persons intending to export, re-export or transfer items that the US regulates to COSEINC must first obtain a licence to do so from the US Government.

Arising from this, the Cyber Security Agency (CSA) looked into COSEINC. The company’s offerings include cybersecurity training courses. We can share that, in this regard, it is one of many vendors to have provided training services to the Government and the contractual terms were standard.

CSA also found no evidence that COSEINC had breached cybersecurity laws in Singapore. Companies found to have contravened our laws and regulations will be dealt with in accordance with the law.