Page 11 - ITU Indicators for Smart Sustainable Cities – Pilot project Singapore
P. 11

ITU Indicators for Smart Sustainable Cities – Pilot project Singapore

                              Sub-                                                               Singapore
              Dimension                              Indicator           KPI definition
                            dimension                                                         Reported Value
                 ICTs         D1.3      I   1.3.2   Existence of   The definition is: Existence and   Yes
                           Information             systems, rules   application of systems, rules
                           security and            and regulations   and regulations on Child Online
                             privacy               to ensure Child   Protection (COP) to ensure the
                                                      Online        protection of children, the
                                                     Protection    youngest and most vulnerable
                                                       (COP)             digital citizens.
             Reviewed:

             MDA engages services offering online video content to ensure that they carry the necessary safeguards, such as
             local age ratings, consumer advice, and access controls, to aid parental guidance and to protect the young from
             inadvertent access to mature content. For content services offering certain mature content, such content is
             required to be locked by default and only accessible with a PIN set by the subscriber.
              Since 2012, MDA has made it mandatory for local Internet Access Service Providers (“IASPs”) to inform and offer
             optional Internet parental control services to subscribers when they sign up or renew their residential and mobile
             broadband Internet subscriptions. This requirement will be further enhanced by end 2016. IASPs will be required to
             offer these subscribers optional network level Internet parental controls services that come with up to a six-month
             free trial. For subscribers who opt to subscribe to these services, IASPs will need to filter by default content
             containing "sexually explicit material, violence and gore".
             The Media Literacy Council's website is a one-stop resource portal providing information on the Council's media
             literacy programmes and resources for educators, parents, youths and the general public.
             Status: KPI Verified

                 ICTs         D1.3      I   1.3.3   Existence of      Existence of rules and       YES
                           Information             systems, rules   regulations to ensure privacy
                           security and            and regulations   protection in public service.
                             privacy                 to ensure       This should also include
                                                      Privacy      proportion of public services
                                                    protection in   and devices that ensure privacy
                                                   public service         protection.

             Reviewed:
             The Government Instruction Manual 8 (IM8) governs how data and electronic records are managed in agencies.
             Paragraphs M3.1 to 3.7 in the manual.
             Protection for all types of data
             M3.1 Agencies shall protect all Data in their possession or under their Control (including Data received from other
             Agencies), or when disclosing Data to a Third Party. The security safeguards shall protect Data against unauthorised
             access, modification, Use, Disclosure, Disposal or similar risks, whether accidental or intentional.
             M3.2 Agencies shall adhere to the requirements specified in the Policy on ICT Security, Policy on Personal
             Computers or other prevailing Government requirements when protecting Systems that process Data.
             M3.3 Agencies shall ensure that their officers are granted access to classified data:
             (a) on a need-to-know basis for performing their official duties or to support the business function of the agency;
                and
             (b) are appropriately security-cleared based on the security classification of data.
             M3.4 Agencies shall ensure that processes are in place to periodically verify that security safeguards are in place,
             effective and being complied with by the relevant officers involved in handling data.
             M3.5 Agencies shall ensure that their officers are educated on the agency’s data protection policies and processes,
             and the importance of maintaining the confidentiality, integrity and availability of data.
             M3.6 Agencies shall implement processes to dispose of or destroy data so as to prevent unauthorised parties from
             gaining access to the data.



                                                            7
   6   7   8   9   10   11   12   13   14   15   16