Focus on developing digital infrastructure and upskilling their workforce to remain agile – BDO’s Cecil Su

He delves into cybersecurity's role in tackling advanced threats, enabling innovation, and enhancing business resilience.

Singapore's dynamic tech landscape demands innovation, robust cybersecurity, and sustainable practices to enhance resilience and competitiveness. Companies are leveraging emerging technologies to address challenges and drive growth in an increasingly digital economy.

Offering valuable insights is Cecil Su, Director and Head of Cybersecurity at BDO, leading the Cyber Security & DFIR unit. He oversees teams specialising in advisory, adversarial security testing, threat intelligence, and threat hunting across industries. His expertise focusses on cybersecurity research and security testing, helping clients strengthen protection beyond compliance.

Cecil is a fellow member of the Association of Information Security Professionals (AiSP) and an AiSP Validated Information Security Professional (AVIP). He is also a Subject Matter Expert for WorldSkills Singapore, a contributor to the OWASP Testing Guides v3 and v4, co-leads the OWASP Singapore Chapter, and sits on the CREST Asia Council.

As a judge at the Singapore Business Review Technological Excellence Awards 2025, Cecil shared his insights on the evolving role of cybersecurity, emerging technologies, and innovation in driving resilience, sustainability, and global competitiveness.

With your extensive experience, how has the role of cybersecurity evolved in enhancing business resilience across Singapore’s technology and business sectors?

In my observation of Singapore's cybersecurity landscape, the fundamental threats haven't drastically changed over the past decade, but their sophistication and impact have intensified significantly. Frankly, not too many changes to the threats in the last decade as observed throughout the years, yet the role of cybersecurity has evolved from being merely an IT function to becoming a critical business enabler and risk management priority. Probably advancement from threat actors and the increase of more sophisticated means of attack vectors from malware, ransomware, and online scams have compelled organisations to adopt a more proactive and holistic approach to cyber resilience. Deepfakes are one big area that we noticed recently, adding another layer of complexity to the security challenges faced by businesses. The evolution of cybersecurity in Singapore has been marked by increased board-level involvement, stronger regulatory frameworks, and greater emphasis on building cyber-resilient ecosystems that can support the nation's smart city initiatives and digital economy aspirations.

As companies embrace emerging technologies like AI, IoT, and cloud computing, what key security considerations should they prioritise to avoid vulnerabilities?

Whilst emerging technologies offer tremendous opportunities, organisations must remain vigilant about their inherent security risks, with the tenets of CIA (Confidentiality, Integrity, and Availability) still very much in use as foundational principles. With AI, a new breed of attack vectors has evolved, and we need to cater for fairness, ethics, accountability, and transparency in our security frameworks. IoT and cloud computing vulnerabilities have always been there, embedded either in the firmware/software or within the intricacies of the cloud tenants, requiring robust security measures and continuous monitoring. The other emerging technology that should be considered is quantum or post-quantum technology, which will introduce another wave of vulnerabilities that organisations need to prepare for proactively. Companies must adopt a comprehensive security-by-design approach that encompasses regular security assessments, strict access controls, and encryption protocols whilst staying informed about emerging threats and countermeasures.

With global economic uncertainties, how can businesses in Singapore use technology to adapt and maintain competitiveness?

In the face of global economic headwinds, Singapore businesses must leverage technology strategically to maintain their competitive edge, with innovation and sustainability in mind, and the ability to build things is critical in this era. Embracing digital transformation through automation, data analytics, and artificial intelligence can significantly enhance operational efficiency and reduce costs whilst enabling companies to make more informed business decisions. Companies should focus on developing robust digital infrastructure and upskilling their workforce to harness these technologies effectively, ensuring they remain agile and responsive to market changes. Strategic investments in cloud computing and digital platforms can provide the flexibility needed to scale operations up or down based on market demands whilst also facilitating remote work capabilities and global collaboration. Moreover, businesses should prioritise cybersecurity measures and digital resilience to protect their technological investments and maintain customer trust in an increasingly digital marketplace.

How do you see technology playing a role in advancing sustainability goals for businesses in Singapore?

Technology is increasingly becoming a crucial enabler for businesses in Singapore to achieve their sustainability objectives, with data collection and analysis as well as AI agents being some ways to help with sustainability efforts. The goal is to be more efficient, and faster processing, thereby reducing waste, which can be achieved through smart technologies that optimise resource utilisation and energy consumption. The dynamics of cyber-risks and climate change are closely intertwined, and they continue to evolve in complexity, making it essential for companies to adopt integrated approaches to address both challenges. By implementing robust cybersecurity protocols, companies can ensure the integrity of ESG data, protect their brand reputation, and maintain financial stability whilst pursuing their sustainability agenda. Advanced technologies like IoT sensors, blockchain for supply chain transparency, and AI-powered analytics are enabling businesses to monitor, measure, and improve their environmental impact with unprecedented precision.

Looking ahead, how can Singapore’s businesses position themselves to successfully expand their innovations into global markets?

Singapore's unique position as a global business hub can be leveraged through the strength of the Made in Singapore brand, which carries significant weight in international markets. We embody the best of the East and the West, giving our businesses a distinctive advantage in understanding and catering to diverse global markets. We should take pride, enable our workforce and nurture our expertise in human capital and expertise to maintain our competitive edge in the global marketplace. Singapore businesses can capitalise on our reputation for quality, innovation, and reliability by focussing on developing cutting-edge solutions that address global challenges whilst maintaining the high standards associated with our nation's brand. Additionally, by leveraging our extensive trade networks, strong digital infrastructure, and robust intellectual property protection framework, Singapore companies can strategically expand their innovations into new markets whilst building lasting partnerships across borders.

What are the key criteria and expectations you have for this year’s nomination entries, and how do you believe these criteria reflect the evolving trends and innovations in the technology industry?

In anticipation of this year's 2025 nominations, I would like to focus on innovations that demonstrate something that reflects on the urgency of sustainability and efficiency in automated workloads, as these elements are crucial in today's technology landscape. This may not be just looking for solutions that not only showcase technical excellence but also demonstrate measurable impact in reducing environmental footprints whilst optimising resource utilisation. Entries should clearly illustrate how their innovations address real-world challenges through scalable, future-ready technologies that can adapt to evolving market demands. It would be nice to expect submissions to demonstrate strong governance frameworks, particularly in areas such as data privacy, security, and ethical AI implementation. Similarly, solutions that showcase innovative approaches to digital transformation whilst maintaining a balance between technological advancement and sustainable practices will be highly regarded.