Questions about AI risk and cybersecurity

Real questions from prospects, worded the way they asked them.

What kind of services do you provide?

We help regulated companies in Singapore with three things: security testing (penetration testing, including of AI systems and AI agents), the compliance evidence regulators ask for, and AI governance — for example the AI inventory the MAS AI Risk Management Guidelines require. Everything is fixed price with fixed dates. Services: MAS AI Inventory Sprint (S$15,000–20,000, 10 business days); AI system and agent red-team (S$10,000–20,000 per system); web, API and network VAPT (from S$1,500 per asset); Cyber Essentials and Cyber Trust readiness (from S$2,000); compliance documentation; training.

With the new MAS rules, can individuals still use AI tools?

Yes. MAS does not ban staff from using AI tools. It expects the firm to know which AI is in use — including tools individual advisers and staff use themselves — rate the risk of each use, and put controls in place that match that risk. Typical controls: no client personal data in public AI tools, an approved list of tools, and human review of anything AI-generated that goes to a client. Individual use is fine once the firm has listed it and set the rules.

Talk to us

Tell us what needs testing or documenting and the date you're working to. We'll send a proposal with the price and dates.