Singapore, 18 December 2025 — Frost & Sullivan, in collaboration with ISACA Singapore, today released the findings of their seventh consecutive annual study examining Singapore’s corporate cyber security landscape, revealing that rapid adoption of artificial intelligence (AI) and cloud technologies is significantly reshaping organisational risk profiles.
Based on insights from 127 ISACA members across cyber security, risk, and governance roles, the 2025 study reveals a growing gap between technology adoption and cyber risk readiness, particularly across extended supply chains and third-party ecosystems.
Key Findings from the Data
- Technology Adoption and Risk: AI and Cloud Drive Progress, But Elevate Threats
- AI Adoption: Over the last year, 70% of organisations in Singapore have ramped up their use of AI tools, weaving them into daily operations like supply chains, automation, and customer service. This trend aligns with the national approach, which encourages incorporating AI into government, public services, and businesses.
- Cloud Adoption and Security: 96% of the respondents indicated cloud security is important, with 72% reporting increased cloud adoption in the past year. Public cloud usage is widespread and most organisations rely on multiple cloud service providers.
- Business Priorities: AI/ML and cloud technologies were cited as the most crucial for achieving business priorities, according to 60%+ of respondents.
- Rising Risk: However, this acceleration in technology adoption is leading to heightened cyber risk. 83% of respondents indicated that rising AI adoption is elevating organisational cyber-risk concerns, with most organisations still in early stages of AI strategy maturity.
- Threat Landscape: Supply Chain and Extended Ecosystem Risks Dominate
- Criminal Groups: While cybercriminals remain a major concern, threats are increasingly distributed across the broader ecosystem, not just traditional attackers.
- Organisation’s Extended Supply Chain could be a Potential Blind Spot: Organisations identified supply chain actors including vendors, service providers and employees as one of their top three threat groups, underscoring the need for robust third-party risk management.
- Top Cyber Security Challenges: Third-Party Risk, Talent and Regulation
- Third-Party Risk: External threat groups and supply chain vulnerabilities were identified as the highest threat, with third-party risk management cited as a top challenge by nearly half of respondents.
- Resourcing and Skills: Talent shortages, financial constraints and high turnover were reported as key human resource challenges, limiting team scalability and operational resilience.
- Regulatory Requirements: 2025 saw the expansion of the Cybersecurity (Amendment) Act, increasing compliance obligations to cloud-based and outsourced systems.
- AI for Security as a Core Priority: Modern Solutions for Detection and Response
- Planned Adoption: 69% plan to expand AI use in cybersecurity within the next year, with 19% expecting AI to become central to their security strategy.
- Detection and Response: Organisations are increasingly adopting AI-driven cybersecurity tools for real-time detection, network monitoring, anomaly identification, and phishing email prevention.
- Positive Actions: Board Engagement and Data-Driven Security
- Board Engagement: 51% of Singapore organisations hold cyber security briefings for senior management at least once a quarter, supporting ongoing leadership awareness.
- Data-Driven Metrics: Initiatives to improve cyber security perception among senior management, with nearly 70% of organisations focusing on board communication and metrics reporting, positioning cyber security as a business concern.
Leadership Perspectives
Yap Lip Keong, President, ISACA Singapore:
“This year’s study highlights both the remarkable progress and the urgent challenges facing Singapore’s cyber security community. The rapid adoption of AI and cloud technologies—reflected in 70% of organisations now using AI—demands a renewed focus on risk management, talent development, and regulatory compliance. As supply chain and ecosystem threats rise, our members’ insights reinforce the need for strategic investment in modern security solutions and a culture of continuous learning. By engaging regularly with boards and senior management, and by leveraging data-driven metrics, we can ensure cyber security remains at the heart of business resilience and growth.”
Kenny Yeo, Director, Frost & Sullivan:
“Singapore’s cyber security landscape is evolving at an unprecedented pace. The findings show that while organisations are embracing AI and cloud to drive innovation and efficiency, they must also contend with increasingly complex threats and persistent talent gaps. With supply chain actors now recognised as top threat groups, it is essential for leaders to prioritise investment in advanced security technologies and foster collaboration across teams. By aligning cyber security”
–END–
About Frost & Sullivan
YOUR TRANSFORMATIONAL GROWTH JOURNEY STARTS HERE. Frost & Sullivan’s Growth Pipeline Engine, transformational strategies and best-practice models drive the generation, evaluation, and implementation of powerful growth opportunities. Is your company prepared to survive and thrive through the coming transformation? Join the Journey
About ISACA Singapore
ISACA Singapore Chapter is the leading cyber risk professional association in Singapore dedicated to advancing excellence in information systems governance, cybersecurity, risk management, audit, and digital trust. As one of ISACA’s most active chapters globally, we bring together practitioners, leaders, regulators, and industry partners across both public and private sectors.
The chapter plays a key role in supporting Singapore’s cybersecurity and digital trust ecosystem through professional education, globally recognised certifications (such as CISA, CISM, CRISC, AAIA and AAISM), industry research, and thought leadership initiatives. Working closely with government agencies, academia, and industry bodies, ISACA Singapore Chapter helps organisations and professionals navigate emerging cyber risks, regulatory expectations, and technology-driven transformation.
Through collaborations such as this joint cybersecurity survey with Frost & Sullivan, ISACA Singapore Chapter and its 3700 members also continue to contribute practical insights and evidence-based perspectives to strengthen the cyber resilience of Singapore organisations.
For media inquiries, please contact:
Xziranjeev S Manikam
Assistant Manager, Customer Experience APAC
Frost & Sullivan
[email protected]
Wendy Lim,
Director Marketing,
ISACA Singapore
[email protected]
