Working templates built on the published Singapore requirements. Use them as they are, or send them back for a free review.
Security advisory · 22 October 2026
Unauthenticated remote code execution in PHP (CVE-2026-109618, CVE-2026-109619). CISA has listed both as exploited since 26 October. Free 6-page mitigation guide.
Free workshop for business owners
A half-day workshop on what customers, banks and assessors now ask of small firms. Next session: Monday, 23 November 2026, online.
Excel, 7 sheets
Every AI use case on one sheet with the MAS paragraph 4.7 attributes, inherent and residual materiality ratings, provider records and a readiness tracker. Send it back completed and we return a gap report within 2 business days.
Excel + usage note
45 questions in 7 sections for the AI inside the software you buy, mapped to the MAS Guidelines on AI Risk Management (paras 4.2 and 5.10 onward). Send it to your vendors before the inventory is due.
The tests behind CSA's two named agent risks, unauthorised actions and sensitive data disclosure, mapped to the CSA Addendum on Securing Agentic AI and IMDA's starter kit for testing agentic systems.
Prefer to walk through it? Book a 30-minute review call.