At a glance
Programme detail
Summary
Agencies
Cyber Security Agency of Singapore (CSA) / Infocomm Media Development Authority (IMDA)
Programme
SG Cyber Safe / SMEs Go Digital
Support type
Co-funding of approved services
Status
Open
Application cycle
Rolling
Support
Up to 70% for eligible SMEs
Monetary cap
Depends on the approved package and applicant eligibility
What does it support?
Health-plan services help a business assess gaps, develop cybersecurity recommendations and prepare for Cyber Essentials or Cyber Trust certification. A separate VAPT package supports vulnerability assessment and penetration testing.
The service and package should match the business's cybersecurity needs; a health plan and a technical security test serve different purposes.
Who can apply?
Eligible Singapore SMEs must meet the applicable IMDA support criteria and engage a CSA-onboarded CISOaaS consultant for a qualifying service package. Confirm the relevant SME size and ownership conditions through IMDA before relying on the subsidy. A universal local-shareholding threshold is not specified in the available programme information.
How does the support work?
Co-funding applies to approved health-plan and VAPT services, subject to the chosen package and the applicant's eligibility. There is no single publicly stated monetary ceiling across all packages, so confirm the subsidy and remaining company contribution for the actual service being purchased.
What expenditure can qualify?
Approved cybersecurity health-plan consultancy, Cyber Essentials or Cyber Trust readiness services, and VAPT can qualify. CISOaaS Incident Response services are currently outside the funding support.
Key conditions
- Use a CSA-onboarded consultant and an approved service package.
- Check the IMDA eligibility and subsidy conditions for the business.
- Treat health-plan services and VAPT as separate package or application decisions.
- Confirm the scope and company contribution before committing to a provider.
Timing and application process
Support is available on a rolling basis. Select an onboarded provider from CSA's listing, identify the relevant Cyber Essentials, Cyber Trust or VAPT package through IMDA's SMEs Go Digital platform, and follow that package's application requirements.
Important programme distinctions
This support helps an SME obtain cybersecurity advice and assessment services; it does not fund the development of a new cybersecurity product. Provider onboarding also does not constitute CSA endorsement of the provider. Incident response remains a separate, currently unfunded service.