SC Cyber Chief Growth Officer Victor Lim says public agencies adopting cloud services, AI and other digital technologies need cybersecurity teams that reassess changing systems continuously, coordinate across departments and keep human judgment central. Agencies must deliver digital services while protecting sensitive information, maintaining existing services and preserving public confidence.

Lim compares security teams with an F1 pit crew: they should work quickly with technology, data, privacy and operations specialists as systems evolve. Cloud services, APIs, AI and third-party integrations continually change an organisation’s attack surface. A penetration test records what was secure or vulnerable at a particular time, but its assurance may no longer hold after an agency adds an integration, accesses a different dataset or introduces an AI capability.

Lim advocates continuous security validation to check whether protections and their underlying assumptions remain effective as environments change. Human-led audits and penetration testing remain essential, while AI can help make validation continuous and more efficient. Agencies should determine when changes require renewed scrutiny and who must act on findings; the aim is greater confidence, not simply more testing.

For AI services, security depends on more than the model. Agencies need to establish which data an AI system can access, what permissions it has, which systems it can interact with and what actions it may take. A tool that retrieves information raises different questions from one allowed to act on it, so assessment must cover the wider service, its integrations and autonomous actions. Lim says cybersecurity, privacy, data and governance teams should shape these boundaries together during design, rather than waiting for a final review.

Lim identifies silos between technology, cybersecurity, data, privacy and risk teams as a readiness gap in Singapore and the region. For example, expanding an AI system’s access to a dataset raises questions about technical permissions, appropriate data use and operational need. Teams need to resolve these together from the start, with security specialists understanding the service’s purpose and service teams understanding design risks and constraints.

AI can help security consultants analyze more information, spot potential weaknesses and automate repetitive work, but people must still judge whether a finding is valid, how serious it is and what response is appropriate. Lim says teams need technical expertise, AI capability, organizational understanding and cross-disciplinary collaboration. Upskilling should build practitioners’ judgment alongside familiarity with new tools.

SC Cyber plans to present these themes at GovWare 2026 through an F1 Pit Stop booth concept connecting offensive security, risk and resilience, assurance and compliance, and cyber workforce development. The concept links continuous system validation, governance of technology and AI use, and development of the people responsible for security.

SC Cyber Chief Growth Officer Victor Lim says public agencies adopting cloud services, AI and other digital technologies need cybersecurity teams that reassess changing systems continuously, coordinate across departments and keep human judgment central. Agencies must deliver digital services while protecting sensitive information, maintaining existing services and preserving public confidence.

Lim compares security teams with an F1 pit crew: they should work quickly with technology, data, privacy and operations specialists as systems evolve. Cloud services, APIs, AI and third-party integrations continually change an organisation’s attack surface. A penetration test records what was secure or vulnerable at a particular time, but its assurance may no longer hold after an agency adds an integration, accesses a different dataset or introduces an AI capability.

Lim advocates continuous security validation to check whether protections and their underlying assumptions remain effective as environments change. Human-led audits and penetration testing remain essential, while AI can help make validation continuous and more efficient. Agencies should determine when changes require renewed scrutiny and who must act on findings; the aim is greater confidence, not simply more testing.

For AI services, security depends on more than the model. Agencies need to establish which data an AI system can access, what permissions it has, which systems it can interact with and what actions it may take. A tool that retrieves information raises different questions from one allowed to act on it, so assessment must cover the wider service, its integrations and autonomous actions. Lim says cybersecurity, privacy, data and governance teams should shape these boundaries together during design, rather than waiting for a final review.

Lim identifies silos between technology, cybersecurity, data, privacy and risk teams as a readiness gap in Singapore and the region. For example, expanding an AI system’s access to a dataset raises questions about technical permissions, appropriate data use and operational need. Teams need to resolve these together from the start, with security specialists understanding the service’s purpose and service teams understanding design risks and constraints.

AI can help security consultants analyze more information, spot potential weaknesses and automate repetitive work, but people must still judge whether a finding is valid, how serious it is and what response is appropriate. Lim says teams need technical expertise, AI capability, organizational understanding and cross-disciplinary collaboration. Upskilling should build practitioners’ judgment alongside familiarity with new tools.

SC Cyber plans to present these themes at GovWare 2026 through an F1 Pit Stop booth concept connecting offensive security, risk and resilience, assurance and compliance, and cyber workforce development. The concept links continuous system validation, governance of technology and AI use, and development of the people responsible for security.