Singapore - Issue 2 of Residential Gateway Security Requirements

Further to the Alphabet Newsletter issued on 23rd April 2026, the Infocomm Media Development Authority (IMDA) published Technical Specification for Security Requirements for Residential Gateways Issue 2 (IMDA TS RG-SEC Issue 2) on 8th June 2026.

Compared with the previous Issue 1 published in 2020, Issue 2 raises the mandatory cybersecurity requirements for residential gateways(RGs) from Cybersecurity Labelling Scheme (CLS) Level 1 to Level 2, while strengthening requirements related to password management, authentication, and firmware upgrades.

According to the implementation plan outlined by IMDA during the public consultation, Issue 2 will take effect six months after its publication, at which point all newly registered RGs models should comply with IMDA TS RG-SEC Issue 2. And the existing models already registered are still allowed to be sold on the market.

Twelve months after its publication, all RGs sold for local use in Singapore shall comply with IMDA TS RG-SEC issue 2.

Should you have any questions, please contact: reg.news@alphabetcompliance.com