The Singapore Infocomm Media Development Authority (IMDA) and the Cyber Security Agency (CSA) of Singapore have officially announced a major update to consumer device security. All residential gateways and Wi-Fi routers sold in Singapore must now be upgraded to meet **Cybersecurity Labelling Scheme (CLS) Level 2** requirements by the end of 2027.
Addressing Residential IoT Vulnerabilities
1. Transitioning from Level 1 to Level 2
The policy update is driven by audits highlighting the vulnerability of home network hubs to sophisticated malware. While CLS Level 1 covers basic hygiene (like unique default passwords), Level 2 mandates secure-by-design architectures, requiring secure communication channels and encrypted storage for local settings.
2. Mutual Recognition with Japan
To simplify compliance, Singapore continues to expand its Mutual Recognition Arrangements (MRAs). Effective June 1, 2026, Singapore's CLS and Japan’s JC-STAR scheme will be mutually recognized, allowing manufacturers certified under Japan's standard to enter Singapore without duplicate testing.
3. Source Reference Information
Equipment suppliers should review their product compliance schedules to align with the CLS Level 2 roadmap. Official announcements can be reviewed directly on the Singapore IMDA Press Portal.
HertzWeg Insight:
"Singapore is leading the charge in IoT security. Transitioning to CLS Level 2 requires hardware-level updates and secure boot configurations. We recommend device manufacturers start modifying their designs immediately."
For expert assistance with Singapore compliance and navigating the Cybersecurity Labelling Scheme (CLS), contact the HertzWeg compliance team.