Key actions in the bulletin
The bulletin identifies data theft, financial losses, operational disruption and legal consequences as business impacts. Apply strong authentication and role-based access, patch systems, train staff, encrypt sensitive data and test incident-response plans.
Exercise SG Ready 2025, held 15–28 February, simulated prolonged power disruption following a phishing attack. More than 800 organisations, schools and businesses were expected to participate. The source points to power-outage guidance, a board cyber-resilience guide and self-facilitated tabletop packages.