Engineering Digital Government

The digital transformation of Singapore's public sector

Realising the Digital Government Blueprint

Through our digital government efforts, we aspire to create a government that is “Digital to the Core, and Serves with Heart.” This means making government transactions easy, seamless, and secure; streamlining processes; enhancing accessibility; and leveraging technology to provide better services for citizens and businesses.

It also means empowering public officers to continually upskill and work collaboratively across agencies to drive digitalisation within the government and deliver better services.

Collectively, these contribute to our Smart Nation 2.0 vision of creating a thriving digital future for all Singaporeans.

A shared stack for collective progress

In line with these efforts, we need to enable a consistent service standard across the government comprising user-centric services that are secure.

Thus, a robust development stack that supports modern application development across the government has been adopted.

Digital Government products

Singapore Government Tech Stack (SGTS)

SGTS provides government agencies with a shared digital infrastructure and tools so they can develop applications better, smarter and faster.

Government on Commercial Cloud (GCC)

Less sensitive data can now be stored on a cloud computing platform so agencies can adopt commercial cloud solutions.

API Exchange (APEX)

A self-service API platform that functions as a centralised and secure API gateway and data-sharing platform for the government.

Cybersecurity efforts within the digital government

GovTech leads the efforts to develop the cybersecurity strategy for the government, secures the usage of government digital services for the public and protects the Government’s ICT systems and Smart systems (ICT & SS).

Our suite of cybersecurity capabilities range from blue-teaming capabilities that detect and respond against cyber threats, to red-teaming capabilities that uncover cyber vulnerabilities in Government’s ICT & SS. 

Beyond developing cyber-defence capabilities, we also develop cybersecurity policies and guidelines for agencies, work with agencies to implement secure architectures, and provide cybersecurity technical guidance that help build a safer, more secure Smart Nation for our citizens and businesses.

Learn about our cybersecurity efforts

How the government chief information security officer keeps cyberspace secure

GovTech cybersecurity specialists zero in on zero day vulnerabilities

Women in cybersecurity — GovTechies on life as cyber guardians

Government IT Security Incident Response (GITSIR) team

The Government IT Security Incident Response (GITSIR) team enables the Government to provide a swift response to cybersecurity incidents.

Here’s a quick look at what the team does:

• Perform incident investigations, digital forensics, malware analysis, etc.

• Act as the primary point of contact for all security incidents co-ordinate with relevant internal and external parties.

GITSIR proactively publishes alerts, advisories, and directives on security vulnerabilities and threats. GITSIR regularly keeps agencies up-to-date on cybersecurity best practices to address the latest and upcoming cyber threats.

However, incidents may still occur from time to time. Agency users or IT teams that detect unusual activities or suspected malware must report their observations to GITSIR. Each Agency has appointed its own team of Security Incident Response Managers and Officers (SIRMs/SIROs). Together with the Chief Information Security Officers (CISO) and GITSIR, they work together to take the necessary steps when faced with possible cybersecurity threats.

GITSIR uses the Incident Management process to identify the incident’s root cause and provide recommendations to agencies, who will then contain, recover and strengthen themselves against future attacks. GITSIR helps to triage each report to ascertain the severity of each case as well as coordinate with the parties involved, and advise affected agencies on appropriate actions. It also carries out forensic and malware analysis and helps the Government prevent future attacks.