新加坡立杰律师事务所副管理合伙人 Abdul Jabbar 曾任新加坡董事协会认证与专业发展委员会成员，他为 2026 年 4 月 10 日出版的《商业时报》“董事会事务”专栏撰文，题为“董事会为何需要应对网络安全事件的指南”。
企业正日益面临更为频繁、复杂、精心策划的网络攻击，其中生成式人工智能 (“AI“) 通过深伪技术和 AI 自动化攻击等手段加剧了风险。在此背景下，新加坡交易所要求上市公司将网络安全视为由董事会负责监管，并承担相应披露责任的风险。因此，上市公司应在财务、运营、合规和信息技术等领域建立健全有效的内部控制和风险管理体系。
文章阐述了有效的网络风险管理指南应涵盖的内容，包括企业级网络风险框架、经过测试的事件响应和业务连续性计划，以及适当的网络保险——所有这些都需由训练有素的员工队伍和严格的第三方供应商监管提供支持。文章还重点介绍了上市公司在发生网络事件时的披露义务。在这种情况下，上市公司必须迅速评估事件的严重性，及时在新加坡交易所网络（SGXNET）发布公告，并与利益相关者进行清晰的沟通。受《2012年个人数据保护法》管辖的实体还必须遵守该法的数据泄露通知规定。提供金融、云服务或数据中心服务的上市集团可能需要根据适用的行业法规履行额外的通知义务。
点击此处阅读全文。
点击此处了解更多关于我们公司治理业务的信息。
Disclaimer
Rajah & Tann Asia is a network of member firms with local legal practices in Cambodia, Indonesia, Lao PDR, Malaysia, Myanmar, the Philippines, Singapore, Thailand and Vietnam. Our Asian network also includes our regional office in China as well as regional desks focused on Brunei, Japan and South Asia. Member firms are independently constituted and regulated in accordance with relevant local requirements.
The contents of this publication are owned by Rajah & Tann Asia together with each of its member firms and are subject to all relevant protection (including but not limited to copyright protection) under the laws of each of the countries where the member firm operates and, through international treaties, other countries. No part of this publication may be reproduced, licensed, sold, published, transmitted, modified, adapted, publicly displayed, broadcast (including storage in any medium by electronic means whether or not transiently for any purpose save as permitted herein) without the prior written permission of Rajah & Tann Asia or its respective member firms.
Please note also that whilst the information in this publication is correct to the best of our knowledge and belief at the time of writing, it is only intended to provide a general guide to the subject matter and should not be treated as legal advice or a substitute for specific professional advice for any particular course of action as such information may not suit your specific business and operational requirements. You should seek legal advice for your specific situation. In addition, the information in this publication does not create any relationship, whether legally binding or otherwise. Rajah & Tann Asia and its member firms do not accept, and fully disclaim, responsibility for any loss or damage which may result from accessing or relying on the information in this publication.
