CSA Cyber Trust mark (SS 712)
The CSA Cyber Trust mark (SS 712) certifies that an organisation manages cyber risk in proportion to its exposure. It uses five preparedness tiers and four pillars, is valid for three years with yearly audits, and is issued by CSA-appointed certification bodies. ICFC helps you choose the right tier, prepare, and train your team.
Cybersecurity, IT and Data Protection
- Standard or scheme
- SS 712
- Cyber Security Agency of Singapore (CSA)
- Type
- Scheme
- Awarded under the scheme owner's rules
- Funding
- CSA certification funding
- Up to S$3,600 across four pillars, first certification only, Singapore-incorporated SMEs and non-profits, until 6 February 2028
What is SS 712?
The Cyber Trust mark is CSA's risk-based cybersecurity certification for organisations with more extensive digital operations.
The 2025 edition is published as Singapore Standard SS 712 and now covers classical IT, cloud, operational technology (OT) and AI security.
Who is SS 712 for?
Organisations that handle sensitive data, serve enterprise or government buyers, or rely heavily on digital systems, cloud or OT.
Key details
Tiers
CSA's risk assessment framework points each organisation to its tier, and each tier carries between 10 and 22 preparedness domains. The tier reflects how much cyber risk the business carries, not its size.
- Tier 1
Supporter
- Tier 2
Practitioner
- Tier 3
Promoter
- Tier 4
Performer
- Tier 5
Advocate
Pillars
Classical cybersecurity is the base pillar. Cloud security, operational technology (OT) security and AI security are added as pillars where they apply to your operations.
- Base pillar
Classical cybersecurity
- Pillar 2
Cloud security
Added where it applies
- Pillar 3
Operational technology (OT) security
Added where it applies
- Pillar 4
AI security
Added where it applies
CSA certification funding - Up to S$3,600 across four pillars
This mark is funded by CSA rather than EDGE. CSA funds the first successful certification only, for SMEs and non-profit organisations incorporated in Singapore, until 6 February 2028. The amount is deducted from the fee charged by the CSA-appointed certification body. Consultancy fees are not covered by this funding.
Classical pillar
For the classical pillar, CSA's maximum support ranges from S$1,375 (1 to 10 end-points) to S$2,250 (101 to 200 end-points).
Added cloud, OT or AI pillars
Each added cloud, OT or AI pillar attracts S$225, or S$450 for 101 to 200 end-points, giving up to S$3,600 in total.
Eligibility
First certification only, for Singapore-incorporated SMEs and non-profits, until 6 February 2028. Figures from CSA, checked 11 October 2026.
Impartiality
Impartiality comes first. Every engagement begins with a conflict-of-interest check. We keep consulting and auditing roles separate, and our auditors never audit, on behalf of a certification body, an organisation that ICFC has consulted on the same scope within the period set by that body.
Our certification role
We do not certify organisations ourselves; certificates are issued by accredited certification bodies or scheme owners.
How we help
Third-party assessments
Certification is awarded under the scheme run by the Cyber Security Agency of Singapore (CSA). Where appointed, our auditors carry out assessments on behalf of the certification body; the certificate or mark is never issued by ICFC.
Second-party audits
Supplier and partner checks against the scheme requirements, on behalf of your organisation.
Readiness and internal audits
A pre-assessment that shows exactly what the formal assessment will look for, with a prioritised action list.
Funding
CSA's certification funding is deducted by the certification body from its own fee. Our consultancy is quoted separately and is not covered by that funding.
Non-grant
A fixed-scope engagement: gap assessment, documentation, implementation coaching, internal audit and management review, and support through the formal audit or assessment.
How we work
Practical, proportionate systems that your staff can run after we leave.
Classroom
Public and in-house classroom courses on SS 712: awareness, implementation and internal auditor levels.
Online LMS
Self-paced and live-online courses on the ICFC Digital LMS, with progress tracking and certificates of completion.
Funding
Funding depends on each course's approval status, shown on the course page in the LMS.