What this lesson teaches
I can explain the security measures governments take within their own countries.
Syllabus K336, Issue 3, Guiding Question 4, Responses to security impacts of globalisation. Security measures by governments within their countries
Make a guess
More security incidents are reported this year than last. Do you think the government's measures have failed?
- No, more reports show that the system is catching more threats.
- Not necessarily: better reporting or detection may explain it.
- Yes, more reports show that the measures failed to stop threats.
Show the answer
Not necessarily: better reporting or detection may explain it.
Reports can rise when people are more alert or systems detect more. You need other evidence to judge the measures.
The government uses its powers and specialists to prevent attacks, respond to incidents and help people recover.
Domestic measures are actions taken within a country. For example, during an incident, a public agency coordinates transport operators, emergency services and security experts. Together they protect passengers and restore services in ways no single traveller could.
For terrorism, measures include investigating credible threats, security at borders and public places, legal action against dangerous behaviour, and public preparedness through SGSecure. Rehabilitation helps people move away from extremist views. The Religious Rehabilitation Group (RRG) does this work, supported by the community. Border checks alone cannot stop influence that reaches someone online.
For cyber threats, the Cyber Security Agency of Singapore (CSA) sets security standards, runs specialist response teams, raises awareness and protects essential systems. Because no defence stops every attack, organisations also need recovery plans and tested backups. A backup is a saved copy used to restore data. Testing it in a drill shows whether recovery really works. Restoring your own copy does not delete data that attackers have already taken.
Measures need money, skilled staff and coordination. Checks can cause delays. Monitoring and collecting information raise questions about privacy, fair treatment and oversight, meaning checks on how powers are used. Judge measures by whether they tackle the threat and by evidence of their effect. An announcement, an arrest or a quiet period alone does not prove all risk has gone.
- Terrorism measures
- Investigation, border and site security, SGSecure, rehabilitation.
- CSA
- Cyber Security Agency of Singapore: standards, response, awareness.
- Trade-offs
- Cost, delays, privacy.
Real examples to use
Religious Rehabilitation Group
Islamic scholars and teachers formed the RRG in 2003. It counsels detained JI members and others radicalised by extremist ideas, and supports their families.
Cyber Security Agency
Set up in 2015, the CSA protects key systems such as power, water and banking. The Cybersecurity Act 2018 requires their operators to report attacks.
Worked example: Practising for a cyberattack
A government agency makes public service operators keep recovery plans and runs a practice exercise. One operator restores its test system successfully; another finds its backup does not work and fixes it.
- The exercise tests whether recovery plans work.
- It finds a weakness before a real attack.
- It costs time and money, which is a trade-off. One successful test also does not prove that every future incident will be handled smoothly.
Watch out for this
More security incidents reported always means the government's measures have failed.
More reports can mean more threats, better detection or more people reporting. Judge measures by what was detected, the action taken and the actual harm.
Check your understanding
Why do organisations practise recovering from cyberattacks?
- Because regular drills make attackers less likely to choose them as a target.
- Because restoring from backups removes the copies of data that attackers took.
- Defences can fail, so they need to be able to restore services quickly.
Show the answer
Defences can fail, so they need to be able to restore services quickly.
Right. Preparation limits the harm when an attack succeeds.