Penetration Testing Service Licence

Apply for Penetration Testing Service Licence

Cybersecurity Services Regulation Office (CSRO)

Apply on GoBusiness Dashboard

Application Details

Under Part 5 of the Cybersecurity Act, all cybersecurity service providers providing licensable cybersecurity services as set out in the Second Schedule are required to obtain a cybersecurity service provider's licence regardless of whether they are companies or individuals (i.e. freelancers or sole proprietorships owned and controlled by individuals) who are directly engaged for such services, or third-party CSPs that provide these services in support of other CSPs.

Resellers who provide licensable cybersecurity services to the Singapore market would likewise need to be licensed.

FAQ

1. Where can I find the list of FAQs relating to the application of a new cybersecurity service provider's licence?
   For the list of FAQs relating to the application of a new cybersecurity service provider's licence, please visit CSRO website.

Additional Information

Fee

Individual licence: $500
Company licence: $1,000

Both types of licences are valid for a period of 2 years.

Documents Needed

Supporting Documents

• Photocopy of Identification document
  • Photocopy of both sides of NRIC/Work Pass, or photocopy of Passport showing the personal particulars and official descriptions (for overseas applicants only)
• Certificate of Clearance (For overseas applicants only)
  • Certificate of Clearance or documentation from the relevant authorities in the home country certifying that the officer does not have any record of criminal conviction in the home country. The Certificate of Clearance or documentation shall not be obtained earlier than three months before it is submitted to CSRO.
• Business Profile or equivalent document (For business entity only)
  • Latest ACRA Business Profile or equivalent. The Business Profile is an electronic report that provides information such as registration number, entity name, business activities, registration dates, owners and officers of a business entity, that can be obtained via the Accounting & Corporate Regulatory Authority ("ACRA") BizFile+ Portal. The Business Profile report shall not be obtained earlier than one week before the application is submitted to CSRO.