Securing the Future: Modernising Singapore Government IT Policy Throug...
summary
Singapore rewrites security policy as machine-readable JSON stored in Git, exposing a repository, change history and diffs so agencies see who changed what; adoption includes OSCAL for controls, automated compliance checks tied to CI/CD, a SSP submission portal and preview sites generated with Next.js. Policy shrinks to about 118 controls, becomes parameterised (e.g. password length per agency) and moves from annual PDFs to incremental beta releases, enabling faster fixes and measurable compliance.
AI-written summary · about
chapters (9)
- 0:00Modernizing SG IT policy
- 1:47Traditional IT security challenges
- 6:19Developer-centric policy approaches
- 10:50OSCAL for security controls
- 16:52Policy development with Git workflows
- 21:10Automating policy checks with DevOps
- 26:23Lessons learned in government teams
- 31:17OSCAL future and global adoption
- 33:47Q&A on AI workloads
related talks
38mEngineering Cybersecurity for a Nation: What Singapore is Learning from Cars and Sanitation
44mFireside Chat
27mWhen DevOps Meets Security
23mCreating a Security Policy Framework That works
15mA First Look at Governments' Enterprise Security Guidance
10mAccelerated Readiness with Global Compliance Patterns: The Winning...
22mChange is Hard - Securing the Future Today
15mKeynote: Government's Continuing Path Contributing Towards a Secure Open Source Ecosystem