{"id":1357,"date":"2025-08-06T10:10:01","date_gmt":"2025-08-06T10:10:01","guid":{"rendered":"https:\/\/lexplosion.in\/singapore\/?p=1357"},"modified":"2025-08-06T10:10:09","modified_gmt":"2025-08-06T10:10:09","slug":"mandatory-cyber-hygiene-for-digital-token-service-providers-dtspsin-singapore","status":"publish","type":"post","link":"https:\/\/lexplosion.in\/singapore\/mandatory-cyber-hygiene-for-digital-token-service-providers-dtspsin-singapore\/","title":{"rendered":"Mandatory Cyber Hygiene for Digital Token Service Providers (DTSPs)in Singapore"},"content":{"rendered":"\n

The Monetary Authority of Singapore (MAS) has issued Notice FSM-N31on Cyber Hygiene<\/a> effective\u00a0 30th<\/sup> June, 2025. It mandates all licensed Digital Token Service Providers (DTSPs) to adopt robust cyber hygiene measures.<\/p>\n\n\n\n

This notice applies to all DTSPs licensed under Section 138 of the Financial Services and Markets Act, 2022 (FSM Act) and is aimed at safeguarding critical systems, administrative accounts and customer data against cyber threats.<\/p>\n\n\n\n

Whom does DTSPs apply to?<\/strong><\/h2>\n\n\n\n

It applies to every DTSPs licensed under the FSM Act. An exception to compliance applies only where a DTSP is unable to exercise direct or indirect control over a system to comply with the requirements of this notice and it is not reasonably practicable to engage an alternative provider over whom such control can be exercised. In such cases, the DTSP is exempt from the relevant requirement to that extent.<\/p>\n\n\n\n

What the DTSPs need to do?<\/strong><\/h3>\n\n\n\n

The notice lays down certain cyber hygiene practices that DTSPs should follow:<\/p>\n\n\n\n

    \n
  1. Secure Administrative Account<\/strong>: Secure all accounts with full privileges and un-restricted access to an OS, application, database, security appliance etc. by using practical measures like strong password policies, multi-factor authentication etc. Put safeguards in place to prevent any unauthorised access or misuse.<\/li>\n\n\n\n
  2. Apply Security patches<\/strong>: Use security patches to fix vulnerabilities promptly (based on the risk level). If no patch exists, implement interim controls to manage the risk.<\/li>\n\n\n\n
  3. Set & Enforce Security Standards<\/strong>: Prepare and implement a written set of security standards for every system you use. Ensure all systems comply with those standards or apply compensating measures where compliance isn\u2019t possible.<\/li>\n\n\n\n
  4. Strengthen Network Perimeter Defences<\/strong>: Since unauthorised access to essential data is serious threat, DTSPs must-<\/li>\n<\/ol>\n\n\n\n