Regional depth

    APAC Compliance, handled by local expert

    Asia-Pacific isn't one regulatory environment like Singapore's MAS TRM and PDPA, Indonesia's UU PDP, Malaysia's PDPA, Japan's APPI, and Australia's Essential Eight all have their own requirements, their own regulators, and their own timelines. A platform built for the US or Europe first usually treats this region as an afterthought.

    We don't work that way. Our APAC team is based in Singapore, covering the region directly.

    Talk to our team See every framework FEHA covers
    Regional coverageAPAC
    Team based in
    Singapore
    Countries covered
    5
    Frameworks covered
    16
    Talk to our team

    Frameworks covered

    16 frameworks

    Filter by country:

    FinancialMandatory

    MAS Notice 658

    MAS cyber hygiene requirements for banks in Singapore.

    For: Banks licensed in Singapore

    Singapore
    FinancialMandatory

    MAS Notice 1121

    MAS cyber hygiene notice for licensed financial institutions.

    For: MAS-licensed financial institutions

    Singapore
    ResilienceVoluntary

    Cyber Essentials Mark

    CSA Singapore's baseline cybersecurity certification for SMEs.

    For: Singapore SMEs building cyber hygiene

    Singapore
    PrivacyMandatory

    PDPA 2012

    Singapore's Personal Data Protection Act.

    For: Anyone processing personal data in Singapore

    Singapore
    FinancialConditional

    MAS TRM

    MAS Technology Risk Management guidelines for financial institutions.

    For: Financial institutions under MAS supervision

    Singapore
    ResilienceVoluntary

    Cyber Trust Mark

    CSA Singapore's advanced cybersecurity mark for larger organizations.

    For: Organizations beyond baseline cyber hygiene

    Singapore
    ResilienceMandatory

    Cybersecurity Act (CII) 2018

    Obligations for critical information infrastructure owners in Singapore.

    For: Designated CII owners

    Singapore
    FinancialMandatory

    Payment Services Act 2019

    Licensing and conduct rules for payment service providers in Singapore.

    For: Payment and digital token service providers

    Singapore
    PrivacyMandatory

    UU PDP

    Indonesia's Personal Data Protection Law (Law No. 27 of 2022).

    For: Anyone processing personal data in Indonesia

    Indonesia
    FinancialMandatory

    Penyelenggaraan Perdagangan Aset Keuangan Digital

    Indonesian rules for digital financial asset trading operators.

    For: Digital asset exchanges and operators in Indonesia

    Indonesia
    ResilienceConditional

    Essential 8

    ACSC's eight prioritized mitigation strategies against cyber threats.

    For: Australian organizations and government suppliers

    Australia
    PrivacyMandatory

    Malaysia PDPA 2010

    Malaysia's Personal Data Protection Act.

    For: Anyone processing personal data in Malaysia

    Malaysia
    PrivacyMandatory

    APPI

    Japan's Act on the Protection of Personal Information.

    For: Anyone processing personal data in Japan

    Japan
    SecurityConditional

    ISMAP

    Japan's security assessment program for government cloud procurement.

    For: Cloud providers selling to Japanese government

    Japan
    ResilienceConditional

    Active Cyber Defense (ACD)

    Japan's active cyber defense framework for critical sectors.

    For: Critical infrastructure operators in Japan

    Japan
    AIVoluntary

    AI Guidelines for Business

    Japan's government guidelines for AI governance in business.

    For: Companies deploying AI in Japan

    Japan↔ 1 overlap
    Talk to APAC Expert