Cyber Essentials Mark Certification Funding (SG Cyber Safe Programme)
· Last verified 23 Oct 2026CSA certification that shows an organisation has basic cyber hygiene in place, with funding support deducted from the certification fee for SMEs and NPOs on their first certification.
- Support
- Funding varies by endpoint count, valid until 6 Feb 2028: classical cybersecurity from S$250 (1-5 endpoints) up to S$650 (101-200 endpoints); add-on cloud, OT or AI security pillars about S$50-S$100 each. Deducted directly from the certification body's charges.
- Maximum funding
- No fixed cap published
- How to apply
- Apply through a CSA-appointed certification body
- Apply before starting?
- Yes, before any commitment or payment
Recent changes
Cyber Essentials expanded to cover cloud, OT and AI security pillars; Cyber Essentials (2025) is the current version. Funding table valid until 6 Feb 2028. CSA page last updated 7 Oct 2026.
Who is eligible
- Registered and operating in Singapore
- Singapore-incorporated SME or Non-Profit Organisation
- First successful Cyber Essentials certification only
Quick eligibility check
- 1. Is your organisation incorporated in Singapore?
- 2. Is your organisation an SME or a Non-Profit Organisation?
- 3. Is this your organisation's first certification for this mark?
- 4. Do you know how many endpoints (computers, servers, devices) are in scope?
- 5. Will you use a CSA-appointed certification body?
0 of 5 answered.
What it covers
- Certification fees charged by CSA-appointed certification body
How to apply
- Download the Cyber Essentials (2025) document and self-assessment template from CSA
- Implement the required measures (optionally with CISOaaS)
- Engage a CSA-appointed certification body and apply for funding through it
- Submit self-assessment for desktop review by an independent assessor
- Receive the mark (valid 2 years)
Documents you need
- Completed Cyber Essentials (2025) self-assessment template (XLSX)
- Evidence supporting each control (asset inventory, patching records, access control, backup, malware protection)
- ACRA business profile showing Singapore incorporation
- Endpoint count declaration for funding tier
Frequently asked questions
What is the Cyber Essentials Mark Certification Funding (SG Cyber Safe Programme)?
CSA certification that shows an organisation has basic cyber hygiene in place, with funding support deducted from the certification fee for SMEs and NPOs on their first certification.
How much funding does Cyber Essentials give?
Funding varies by endpoint count, valid until 6 Feb 2028: classical cybersecurity from S$250 (1-5 endpoints) up to S$650 (101-200 endpoints); add-on cloud, OT or AI security pillars about S$50-S$100 each. Deducted directly from the certification body's charges.
Who is eligible for Cyber Essentials?
Applicants must be registered and operating in Singapore. Singapore-incorporated SME or Non-Profit Organisation First successful Cyber Essentials certification only
How do I apply for Cyber Essentials?
Apply through Apply through a CSA-appointed certification body. You must apply before the project starts or any payment is made.
What documents do I need for Cyber Essentials?
Completed Cyber Essentials (2025) self-assessment template (XLSX); Evidence supporting each control (asset inventory, patching records, access control, backup, malware protection); ACRA business profile showing Singapore incorporation; Endpoint count declaration for funding tier.
Sources
Information last verified on 23 Oct 2026. Grant rules change often. Always confirm with Cyber Security Agency of Singapore (CSA) before you apply.
