Singapore to Require CLS Level 2 Security for Residential Routers by 2027
Summary
Singapore will require locally sold residential routers to meet CLS Level 2 by the end of 2027. The change follows a 2025 operation that found more than 2,700 compromised devices in Singapore, including residential routers.
Key points
- CSA and IMDA will require all residential routers sold locally to meet Cybersecurity Labelling Scheme (CLS) Level 2 standards by the end of 2027.
- The policy follows a 2025 global operation that found more than 2,700 compromised devices in Singapore, including residential routers.
- Current CLS Level 1 requirements include unique default passwords, vulnerability management processes and regular software updates.
- CLS Level 2 adds requirements for secure communications, encrypted data storage and stronger authentication.
- CSA and IMDA will update the regulatory framework and provide manufacturers with a transition period to comply.
Article Details
- Event Type
- Singapore regulatory policy announcement mandating stronger cybersecurity standards for residential routers
- Impact
- All residential routers sold in Singapore must meet Cybersecurity Labelling Scheme (CLS) Level 2 standards by the end of 2027. The requirements add secure communications, encrypted data storage, and stronger authentication. The policy follows a 2025 global operation that found more than 2,700 compromised devices in Singapore, including residential routers, that were part of a global botnet.