Cybersecurity and Legal Models for Business Resilience: A Comparative Analysis of Singapore and Neighboring South Asian Nations
DOI:
https://doi.org/10.20961/31gq5m91Keywords:
Business Resilience, Cybersecurity Laws, Legal Frameworks, Sustainable Development, South AsiaAbstract
As digital transformation continues to reshape the global economy, legal frameworks become the essential drivers of corporate digital resilience. This paper presents a comparative legal analysis between Singapore’s strong and proactive cybersecurity laws and the fragmanted legal systems of South Asian countries (Bangladesh, India, Maldives and Bhutan). This study finds that while Singapore focuses on prevention, cooperation and clear procedures for responding to cyber attacks, many South Asian countries rely on criminal liability after the cyber attacks have occurred. As a result of weak coordination between laws, shortage of skilled professionals in this field and absence of separate legal requirements for SMEs, the increase of cyber attacks increases across South Asia. Through a comparative socio-legal approach, this paper recommends establishing national SME Cyber Resilience Centers, improving regional cooperation through common SAARC cybersecurity standards, and adapting key features of Singapore's structured cybersecurity response model to strengthen cyber resilience across the region.
References
Javed, M., & Shah, S. (2021). Comparative Analysis of Cybersecurity Laws in South Asia. International Journal of Law and Information Technology, 29(3), 215-240.
Ang, J., Lim, D., & Teo, S. (2020). Singapore's cybersecurity governance architecture: Institutional design and emerging challenges. Asian Journal of Public Administration, 42(1), 112-135.
Bada, M., & Nurse, J. R. C. (2019). The social and psychological impact of cyberattacks on SMEs. Computers in Human Behavior, 87, 281-289.
Bhatia, R., & Jhunjhunwala, A. (2023). India's Digital Personal Data Protection Act 2023: A critical analysis. Journal of Information Policy, 13(1), 1-35.
Böhme, R., Schwartz, G., & Chuang, J. (2017). Modeling cyber-insurance: Towards a unifying framework. Proceedings of the 2017 Workshop on the Economics of Information Security (WEIS).
Chiriţă, A. D. (2018). Data Protection and Small and Medium-sized Enterprises. European Law Review, 43(4), 540-562.
Chander, A., & Lê, U. P. (2015). Data nationalism. Emory Law Journal, 64(3), 677-739.
Cyber Security Agency of Singapore (CSA). (2018). Cybersecurity Act 2018 (No. 9 of 2018). Government of Singapore.
Cyber Security Agency of Singapore (CSA). (2021). Singapore's National Cybersecurity Strategy 2021. Government of Singapore.
Deibert, R. J. (2015). The geopolitics of cyberspace after Snowden. Current History, 114(768), 9-15.
Gercke, M. (2012). Understanding cybercrime: Phenomena, challenges and legal response. International Telecommunication Union (ITU).
Government of Bangladesh. (2023). Cyber Security Act 2023. Bangladesh Gazette.
Government of Bhutan. (2023). Cybersecurity Act of Bhutan 2023. Royal Government of Bhutan.
Government of India. (2000). Information Technology Act, 2000 (No. 21 of 2000). Ministry of Law and Justice.
Government of India. (2008). Information Technology (Amendment) Act, 2008. Ministry of Law and Justice.
Government of India. (2023). Digital Personal Data Protection Act, 2023 (No. 22 of 2023). Ministry of Law and Justice.
Government of Maldives. (2015). Computer Crimes Act (Law No. 17/2015). Republic of Maldives.
Greenleaf, G. (2019). Asian data privacy laws: Trade and human rights perspectives. Oxford University Press.
International Telecommunication Union (ITU). (2018). Guide to developing a national cybersecurity strategy: Strategic engagement in cybersecurity. ITU Publications.
Islam, M. R. (2022). Digital Security Act 2018 of Bangladesh: An analysis from constitutional law perspective. Bangladesh Journal of Law, 19(1), 23-56.
Klimburg, A. (Ed.). (2012). National cyber security framework manual. NATO Cooperative Cyber Defence Centre of Excellence.
Kshetri, N. (2019). Cybersecurity and development. Oxford Development Studies, 47(1), 1-14.
Linkov, I., & Kott, A. (2019). Fundamental concepts of cyber resilience: Introduction and overview. In A. Kott & I. Linkov (Eds.), Cyber resilience of systems and networks (pp. 1-25). Springer.
Maurer, T. (2018). Cyber mercenaries: The state, hackers, and power. Cambridge University Press.
Michaels, R. (2006). The functional method of comparative law. In M. Reimann & R. Zimmermann (Eds.), The Oxford handbook of comparative law (pp. 339-382). Oxford University Press.
World Economic Forum. (2023). Global Cybersecurity Outlook 2023. World Economic Forum.
Mueller, M. (2010). Networks and states: The global politics of internet governance. MIT Press.
National Institute of Standards and Technology (NIST). (2018). Framework for improving critical infrastructure cybersecurity, Version 1.1. NIST.
Nye, J. S. (2011). Nuclear lessons for cyber security? Strategic Studies Quarterly, 5(4), 18-38.
Personal Data Protection Commission (PDPC), Singapore. (2021). Personal Data Protection (Amendment) Act 2020 and advisory guidelines. PDPC.
Schwartz, P. M., & Solove, D. J. (2014). Reconciling personal information in the United States and European Union. California Law Review, 102(4), 877-916.
United Nations (UN). (2021). Report of the Open-Ended Working Group on developments in the field of information and telecommunications in the context of international security. A/75/816. UN General Assembly.
Van Hoecke, M. (2015). Methodology of comparative legal research. Law and Method, December 2015.
Winn, J. K., & Govern, K. H. (2009). Cybercrime in Asia: Trends and challenges. In Cybercrime and society (2nd ed., pp. 150-178). SAGE Publications.
World Economic Forum (WEF). (2022). Global cybersecurity outlook 2022. World Economic Forum.
Zweigert, K., & Kötz, H. (1998). An introduction to comparative law (3rd ed., T. Weir, Trans.). Oxford University Press.
Published
Issue
Section
License
Copyright (c) 2026 Tahira Attia Fariha; Mohammad Belayet Hossain
This work is licensed under a Creative Commons Attribution 4.0 International License.
This is an open-access journal in accordance with the Creative Commons Attribution 4.0 International (CC BY 4.0) license. This permits users to:
Share — copy and redistribute the material in any medium or format
Adapt — remix, transform, and build upon the material
for any purpose, even commercially.
Under the following terms:
Attribution — You must give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use.
No additional restrictions — You may not apply legal terms or technological measures that legally restrict others from doing anything the license permits.
