The Cyber Security Agency of Singapore (CSA) is set to undergo a leadership transition as David Koh, the current CEO and Commissioner of Cybersecurity, prepares to retire on July 1st. This marks the end of a 42-year public service career, during which Koh has played a pivotal role in shaping Singapore's cybersecurity landscape. His contributions have been extensive, ranging from establishing national frameworks and legislative foundations to positioning Singapore as a respected voice in international cyber diplomacy.
Koh's leadership has been instrumental in several key initiatives. He led the development and refresh of Singapore's Cybersecurity Strategy in 2016 and 2021, and oversaw the establishment and amendment of the Cybersecurity Act in 2018 and 2024. He also established the National Cyber Defence Doctrine, demonstrating a forward-thinking approach to emerging technologies, including artificial intelligence security and quantum-safe migration. Additionally, Koh has built up the cybersecurity ecosystem through initiatives like the CyberSG Talent, Innovation, and Growth Collaboration Centre and the CyberSG R&D Programme Office.
One of Koh's notable achievements was his successful management of major incidents, such as the SingHealth breach and the UNC3886 campaign against Singapore's critical information infrastructure. His strategic engagement and diplomacy have also established Singapore as a credible thought leader in cybersecurity on the international stage. Koh's leadership was recognized with the Public Administration Medal (Gold) in 2017 and the Public Administration Medal (Gold) (Bar) in 2025.
Koh's successor, Gwenda Fong, is a public sector veteran with over 20 years of experience in technology, security, and social policy roles. She has held key leadership positions in the Ministry of Digital Development and Information (MDDI), including deputy secretary for digital society and development, and assistant chief executive for strategy, plans, and digital readiness. Fong's expertise in policy and corporate development, as well as her involvement in the drafting and implementation of the Cybersecurity Act, make her well-suited to lead CSA.
Fong's previous roles include assistant chief executive for policy and corporate development at CSA from 2017 to 2022, where she contributed to the Cybersecurity Act and the refresh of the Cybersecurity Strategy. She has also held positions in the Ministry of Health, Ministry of Defence, and the Defence Science and Technology Agency. Her recognition with the Public Administration Medal (Silver) in 2025 further underscores her dedication and contributions to public service.
The transition of leadership at CSA is a significant development, reflecting the agency's commitment to continuous improvement and adaptation to the evolving cybersecurity landscape. As Fong takes on this new role, she will build upon the strong foundation established by Koh, ensuring that Singapore remains at the forefront of cybersecurity defense and capabilities.
