The Singapore government should not criminalise cybersecurity activities carried out with good intent in order to encourage the sharing of valuable threat information, which will help the industry better combat attacks. It also should clearly define its proposed mandate that would compel organisations to report a data breach within 72 hours, particularly since it typically took weeks or even months before a vulnerability was identified.

Read full news article on ZDNet