MDDI 演講稿 · 2025-03-07
高階政務部長 Janil Puthucheary 在 2025 年財政供應委員會辯論上的演講
要點
- • 政府計劃於今年推出《數字基礎設施法》，針對主要雲服務提供商和資料中心，強制要求實施韌性與安全措施並上報中斷事件。
- • 政府中央系統服務可用率在過去一年從95%提升至99.5%，並持續投入正常執行時間監控工具，並按各服務的重要程度分級部署。
- • IMDA投入最高1億新元升級全國寬頻網路，使網速最高可達當前家庭水平的十倍，10Gbps套餐價格已從一年前逾100新元降至30至70新元。
- • IMDA推出《綠色資料中心路線圖》並於2024年12月啟動能源效率補助金，引導資料中心在實現可持續AI算力增長的同時履行新加坡的氣候承諾。
- • 安全生成式AI助手Pair Chat已被超過半數公務員使用，全政府提示詞工程競賽吸引逾1,040名公務員參與，冠軍為新加坡民防部隊一名消防員。
- • GovTech首屆LAUNCH!駭客松計劃收集到逾600個公務員創意，孵化出26個創新原型，其中包括由小學教師聯合開發的學生口語即時反饋AI工具。
- • GovTech正構建兩大AI安全平臺——與IMDA Moonshot合作開發的安全測試工具Litmus，以及提供"護欄即服務"的Sentinel平臺，確保政府生成式AI應用對公眾安全可用。
完整譯文（繁體中文）
MDDI 英文原文譯文 · 翻譯日期: 2026-06-21
1. 謝謝主席先生。感謝各位議員提出的削減動議和問題，我希望在今天的回應中，一併回應 Jessica Tan 女士、Tin Pei Ling 女士、Ong Hua Han 先生、Sharael Taha 先生、Dennis Tan 先生和 Mariam Jaafar 女士所提交的削減動議。
2. 主席先生，信任是我們智慧國工作的核心。公民和企業必須對他們所依賴的數字系統和服務，以及他們所進行的互動和交易，充滿信心，相信這些都是值得信賴的。
3. 我將闡述 MDDI 建立這種信任的方式：通過確保關鍵數字基礎設施的韌性、安全性和前瞻性，以及推動政府採用人工智慧併為公共利益開展創新。
維護關鍵數字基礎設施和服務的韌性與安全
4. 政府現有的法規旨在降低數字基礎設施和服務面臨的風險，包括網路攻擊和服務中斷。例如：
a. 根據《電信法》，IMDA 要求寬頻和行動網路運營商採取主動措施，將中斷情況降至最低。
b. 數字服務領域也有行業監管規定，例如 MAS 對金融機構提出的 IT 韌性和安全要求。
5. 然而，數字領域的範圍遠不止於此，且在持續演變。資料中心和雲服務等數字基礎設施已在支援眾多功能方面發揮著重要作用，包括網上銀行與支付、網約車、電子商務以及數字身份認證。這些功能讓公民能夠便捷高效地滿足日常需求，也有助於企業發展。然而，數字基礎設施規模的擴大和複雜程度的提升，也意味著網路攻擊的攻擊面隨之增大，硬體故障、配置錯誤及其他問題引發中斷的風險也有所上升。一旦發生中斷，鑑於這些服務的使用率持續提高，其影響將更為顯著。
6. 去年，我們修訂了《網路安全法》，以應對運營環境中出現的新挑戰。
a. 這些修訂預計將於今年晚些時候生效，將賦權網路安全域性（CSA）更好地確保關鍵資訊基礎設施以外的重要實體和系統的網路安全，包括資料中心和雲服務。這反過來將提升各界對新加坡及我們數字經濟的信任與信心。我們也希望關鍵資訊基礎設施的所有者能夠藉此機會審視其商業模式，希望他們能受到鼓勵，以採用商業雲解決方案等新技術為目標，重新審視其商業模式。
7. 除網路威脅外，我們還必須防範干擾數字基礎設施和服務訪問的其他風險，包括火災等實體危險，以及硬體故障和系統配置錯誤等較為隱蔽的風險。
8. 這些風險源於我們對數字基礎設施和服務的依賴。我們無法完全消除風險，因此必須通過降低中斷髮生的頻率和減輕其影響來提升我們的應對準備能力。
9. 我們正致力於今年推出一部新法律，名為《數字基礎設施法》。該法將提升新加坡的數字韌性和安全性，針對基礎性數字基礎設施，首先從主要雲服務提供商和資料中心入手。
a. 該法將要求主要運營商採取措施，維護其韌性和安全性，並將中斷情況降至最低。
b. 我們正在研究要求主要運營商向政府報告中斷情況的規定，以便能從這些事件中更好地學習和改進，並在必要時支援應對和恢復工作。
c. 自2024年中起，我們一直在向數字基礎設施提供商及其部分客戶徵求反饋意見。
10. 資訊通訊媒體發展局（IMDA）近期為雲服務提供商和資料中心釋出了《諮詢指導方針》。這些指導方針包含我們一直與利益相關方磋商的關鍵措施。
a. 該指導方針鼓勵資料中心運營商建立健全的業務連續性系統，並確保為企業客戶提供高可用性服務。
b. 雲服務提供商也被鼓勵管理資料安全風險，並確保制定業務連續性計劃。
c. 所有運營商均被鼓勵實施相關措施，包括微軟（Microsoft）、Equinix 和吉寶（Keppel）在內的眾多提供商及其企業客戶已對新《諮詢指導方針》表示支援，認為其切合實際且符合國際標準。
11. 我們也在加強政府系統的韌性，以確保新加坡人在與政府進行網上互動時能夠充滿信任和信心。
a. 我們已提升各機構所使用中央系統的韌性。過去一年，這些系統的服務可用率從95%提升至99.5%。我們將繼續推廣工具的採用，以提升政府應用程式的韌性，包括用於監控系統正常執行時間的工具。
b. 由於韌性措施會產生成本，我們的方式必須經過合理調校。我們將支援提供重要服務的機構在適當情況下實施更完善的措施。
12. 政府有必要管理對個人資訊的訪問，因為此類資訊可能被詐騙手段所利用。
a. 我們致力於確保資料（包括個人資料）得到謹慎且負責任的管理。
b. 在政府提供涉及資料的數字服務時，各機構必須針對每個使用場景評估利益與風險之間的適當平衡，以在 MDDI 所提供的指導方針和保障措施框架下，實現服務可及性與資料保護的雙重目標。
確保數字基礎設施的前瞻性
13. 主席先生，我們的數字基礎設施不僅必須安全可靠、具備韌性，還必須為新加坡面向未來做好佈局。
14. 去年，我們宣佈 IMDA 將投資最多1億新元，升級全國寬頻網路（NBN）。這將使寬頻速度比目前大多數家庭的速度提升最多10倍。
a. 運營商已開始以更低的價格提供更高速度的寬頻服務。10 Gig 套餐的價格現已介於30至70新元之間，而一年前則超過100新元。
15. 建設面向未來的數字基礎設施，還需要在追求增長的同時應對資源約束。我們必須探索支援新加坡人工智慧雄心與履行氣候承諾兼顧的路徑，並在數字基礎設施增長與環境可持續性之間取得平衡。
a. IMDA 去年釋出了《綠色資料中心路線圖》，引導資料中心提升能效、使用綠色能源，以可持續方式擴大 AI 算力。我們已取得良好進展。例如，BCA-IMDA 資料中心綠色標誌於去年十月更新，進一步提高了資料中心可持續性標準。IMDA 也於去年十二月推出了面向資料中心行業的能效補貼計劃，支援企業升級更節能的 IT 裝置。
b. MDDI 正在探索通過監管進一步提升資料中心可持續性的途徑。我們正在研究其他司法管轄區的做法，並與業界展開初步磋商，以制定適合新加坡實際情況的框架。
以不同方式推進數字政府建設
16. 議長先生，作為數字政府，我們必須以身作則。我們必須持續培養公共部門建立和實驗人工智慧的能力，並開發以公民為中心的解決方案。
a. 我們已在公共服務系統內提供頂級 AI 及大型語言模型工具（LLM 工具）的訪問許可權。Pair Chat 是一款快速、安全的生成式 AI 助手，目前已有逾半數公共服務人員使用。去年，我們舉辦了一場全政府範圍的提示詞工程競賽，吸引了超過 1,040 名公務員參與。光是能說出這件事，就已經說明我們在"推進數字政府"方面相當與眾不同——政府內部舉辦了一場提示詞工程競賽，且有 1,040 名公務員參與其中。決賽選手的任務是在 10 分鐘內使用 LLM 工具搭建一個活動宣傳網站。本次競賽的冠軍是 Muhammad Naim Bin Zahari，他是 SCDF 的一名消防員，參賽時剛剛完成了一班 24 小時的輪班。亞軍是 Rachel Tiang，她是 MOM 的財務官員。兩人均非從事 AI 相關工作的技術人員。然而他們和所有參賽者一樣，完全有能力在 10 分鐘內藉助這些 AI 和 LLM 增強工具搭建出功能完整的宣傳網站。
b. 我們積極讓非技術類公務員參與數字產品的建立。去年，GovTech 舉辦了首屆面向公務員的系列駭客馬拉松活動，稱為 LAUNCH! 計劃。活動徵集到逾 600 個創意，孵化出 26 個創新原型。例如，由兩名小學教師和一名 GovTech 官員組成的團隊，開發了一款 AI 工具原型，可即時為學生提供個性化的口語表現反饋。
c. 我們也在探索如何讓公務員藉助 AI 實現更快、更好的創新。在我們近期舉辦的 Hack for Public Good 駭客馬拉松上，有一個名為 Spaceship 的原型工具，旨在降低公務員進行原型開發的難度。Spaceship 讓公務員能夠使用 AI 智慧體構建和部署功能完整的原型應用，包括基於 LLM 的工具，且全程僅需使用簡單的英文指令。這是一款讓非技術類公務員僅憑普通英語、在數分鐘內將創意轉化為可用應用的工具。我親自試用了這個原型，嘗試讓它編寫一個限制國會議員發言時長的入口網站。它確實在電子表格中加入了相應篩選功能，但我認為這已是目前技術的極限所在。
17. 隨著政府對 AI 的使用不斷增加，理解並降低 AI 應用中的風險至關重要。GovTech 正在構建相關能力，以確保政府的生成式 AI 應用能夠安全上市。
a. 我們開發了 Litmus，一款用於 AI 安全測試的工具。我們精心設計了一套測試方案，確保我們的 AI 應用能夠抵禦誤導使用者或造成聲譽損害的風險。Litmus 與 IMDA 的 Moonshot 合作開發，將於今年正式推出。根據與各政府機構的測試結果，我們已看到 Litmus 能夠提前發現潛在安全問題，使我們得以主動應對。本質上，這是一種"AI 測試即服務"的模式。
b. Litmus 提供 AI 風險診斷，但一旦檢測到風險，我們還需要相應的解決方案。在 AI 領域，"護欄"確保 AI 系統在倫理、法律和功能邊界內執行。我們正在構建 Sentinel，一個為政府 AI 應用提供"護欄即服務"的平臺。產品團隊可從精選的護欄列表中進行選擇，其中包括頂級 AI 開發商提供的護欄，以及 LionGuard 等本地化護欄，並可輕鬆將其整合到各自的應用中。Sentinel 已能夠準確識別滲透系統或誘導 AI 模型產生不當輸出的企圖。
c. Litmus 和 Sentinel 體現了我們開發政府生成式 AI 應用的方向——確保包括公眾在內的所有使用者都能安全使用。
結語
18. 議長先生，我們的數字基礎設施是公民和企業賴以運作的關鍵功能的基礎。因此，我們積極投入，提升關鍵數字基礎設施的安全性、韌性與面向未來的能力。我們也持續在公共部門培養能力，擁抱 AI 實驗與創新，以更好地服務新加坡人。我相信，這將在我們持續推進智慧國家建設之旅的過程中，為我們的數字未來建立信任。
19. 謝謝。
英文原文
MDDI 官網原始記錄 · 抓取日期: 2026-06-21
1. Thank you, Mr Chairman. I thank the Members for their cuts and questions, and I hope in my response today to be addressing cuts filed by Ms Jessica Tan, Ms Tin Pei Ling, Mr Ong Hua Han, Mr Sharael Taha, Mr Dennis Tan and Ms Mariam Jaafar.
2. Sir, trust is at the heart of our Smart Nation efforts. Our citizens and businesses must be confident that the digital systems and services that they rely on, and the interactions and transactions that they engage in, can be trusted.
3. I will explain MDDI’s approach to building this trust: by ensuring the resilience, security and future-readiness of key digital infrastructure, and by driving Government AI adoption and innovation for the public good.
Upholding Resilience and Security of Key Digital Infrastructure and Services
4. The Government has existing regulations to reduce risks to digital infrastructure and services, including cyber-attacks and service disruptions. For example:
a. Under the Telecommunications Act, IMDA requires broadband and mobile network operators to take proactive measures to minimise disruptions.
b. There are also sectoral regulations for digital services, such as MAS’ IT resilience and security requirements for financial institutions.
5. But the digital landscape is much bigger, and constantly evolving. Digital infrastructure like data centres and cloud services have become important in enabling many functions including e-banking and payments, ride-hailing, e-commerce, and digital identity. These functions allow citizens to meet their day-to-day needs and do so conveniently and effectively. They help businesses to grow. However, the growing scale and complexity of our digital infrastructure also mean an increased surface area for cyber-attacks, and a higher risk of disruptions arising from hardware failures, misconfigurations, and other problems. Should these disruptions occur, the impact is higher given the increasing utilisation of these services.
6. Last year, we amended the Cybersecurity Act to address new challenges in our operating environment.
a. These amendments, which are expected to come into force later this year, will empower CSA, the Cybersecurity Agency, to better ensure the cybersecurity of important entities and systems beyond the Critical Information Infrastructure. These include data centres and cloud services. This in turn improves trust and confidence in Singapore and our digital economy. Owners of Critical Information Infrastructure also have the opportunity, we hope, to review their business models. We hope that they will be encouraged to review their business models and do so with a view to using new technologies such as commercial cloud solutions.
7. Beyond cyber threats, we must guard against risks that disrupt access to digital infrastructure and services, including physical hazards like fires, and less visible risks like hardware failure and system misconfiguration.
8. These are risks as a result of our dependence on digital infrastructure and services. We cannot eliminate risk completely, so we must enhance our preparedness by reducing the occurrence and the impact of disruptions.
9. We are working towards introducing a new law this year, called the Digital Infrastructure Act. This will improve Singapore’s digital resilience and security. The Act targets foundational digital infrastructure, starting with major cloud service providers and data centres.
a. The Act will require major operators to implement measures to uphold their resilience and security, and to minimise disruptions.
b. We are studying requirements for major operators to report disruptions to the Government, so that we can better learn and improve from these incidents, and support response and recovery efforts where needed.
c. We have been seeking feedback from digital infrastructure providers and some of their customers, since mid-2024.
10. The Infocomm Media Development Authority, IMDA, recently released Advisory Guidelines for cloud service providers and data centres. These guidelines contain key measures that we have been consulting stakeholders on.
a. The guidelines encourage data centre operators to have a robust business continuity system and ensure high availability for their enterprise customers.
b. Cloud service providers are also encouraged to manage data security risks, and ensure business continuity planning.
c. All operators are encouraged to implement the measures, and many providers including Microsoft, Equinix and Keppel, and their enterprise customers, have expressed support for the new Advisory Guidelines, which they find to be fit for purpose and aligned with international standards.
11. We are also strengthening the resilience of our Government systems to ensure that Singaporeans have trust and confidence when interacting with the Government online.
a. We have improved the resilience of central systems used by Agencies. Service availability for these systems rose from 95% to 99.5% in the last year. We will continue to increase the adoption of tools to improve the resilience of Government applications, including those that monitor system uptime.
b. As resilience measures incur costs, our approach must be calibrated. We will support Agencies providing important services to implement more sophisticated measures where appropriate.
12. There is a need for Government to manage access to information about individuals, as such information could be exploited in scam tactics.
a. We are committed to ensure that data, including personal data, is managed carefully and responsibly.
b. In the Government’s provision of the digital services involving data, Agencies must assess the right balance between the benefits and risks in each use case, to achieve the dual objectives of service accessibility and data protection, in line with the guidelines and safeguards that MDDI has provided.
Ensuring Future-Readiness of our Digital Infrastructure
13. Sir, our digital infrastructure must not only be secure and resilient, but also position Singapore for the future.
14. Last year, we announced that IMDA is investing up to $100 million to upgrade our Nationwide Broadband Network (NBN). This will enable broadband speeds up to 10 times faster than what most households have today.
a. Operators are starting to offer higher speed broadband services at lower prices. A 10 Gig plan now costs between $30 to $70, compared to more than $100 a year ago.
15. Developing our future-ready digital infrastructure also entails addressing resource constraints as we pursue growth. We must explore ways to support Singapore’s AI ambitions while keeping to our climate commitments, as well as balance digital infrastructure growth with environmental sustainability.
a. IMDA launched the Green Data Centre Roadmap last year to guide data centres to improve energy efficiency and use green energy to grow AI compute capacity sustainably. We have made good progress. For example, the BCA-IMDA Green Mark for data centres was refreshed last October to raise the bar for data centre sustainability. IMDA also launched the Energy Efficiency Grant for the data centre sector last December to support businesses’ upgrades to more energy efficient IT equipment.
b. MDDI is exploring further ways to uplift data centre sustainability through regulations. We are studying other jurisdictions and are in early engagement with industry to develop a framework for Singapore’s context.
Doing Digital Government Differently
16. Sir, we have to lead by example, as a Digital Government. We must continue to build the capabilities for the public sector to create and experiment with AI, and unlock citizen-centric solutions.
a. We have made available within the Public Service access to best-in-class AI and Large Language Model tools, LLM tools. Pair Chat is a fast and secure generative AI assistant used by more than half the Public Service today. Last year, we organised a whole-of-government prompt engineering competition. This attracted over 1,040 officers. The fact that I can say this already makes us quite unusual in terms of how we ‘do Digital Government’ – that we have a prompt engineering competition within Government and that there were 1,040 officers who participated. The finalists were tasked to build an event publicity website within 10 minutes using LLM tools. The winner of this competition was Muhammad Naim Bin Zahari, a firefighter with SCDF. At the time of the competition, he had just completed a 24-hour shift. In second place was Rachel Tiang, a finance officer at MOM. Neither were in technical roles dealing with AI. Both of them and all the competitors were more than capable of building this functioning publicity website within 10 minutes using these AI and LLM-augmented tools.
b. We actively involve non-technical public officers in creating digital products. Last year, GovTech held its inaugural series of hackathons for public officers, called the LAUNCH! Programme. It gathered more than 600 ideas and birthed 26 innovative prototypes. For example, a team of two primary school teachers and a GovTech officer prototyped an AI tool to provide students with immediate customised feedback on their oral skills performance.
c. We are also exploring how officers can innovate better and faster with AI. One of the prototypes from our recent Hack for Public Good hackathon was Spaceship, a tool to make prototyping less daunting for public officers. Spaceship enables officers to use AI agents to build and deploy fully functional prototype applications, including LLM-based tools. They do this using just plain English. This is a tool for non-technical public officers to get from an idea to a workable app in minutes using just plain English. I tried out this prototype, and I tried to have it code a portal that restricted the length of MPs’ speeches. It put the appropriate filter into the spreadsheet, but I think that is the limit of the technology today.
17. As we increase the use of AI in Government, it is critical to understand and mitigate the risks in AI applications. GovTech is building the capabilities to ensure that the Government’s Generative AI applications go-to-market safely.
a. We have Litmus, a tool for AI safety and security testing. We have curated a set of tests to ensure our AI applications are resistant to risks that mislead users or cause reputational harm. Litmus is built in partnership with IMDA’s Moonshot, and will be launched this year. Based on tests with Agencies, we have seen how Litmus can spot potential safety issues ahead of time, allowing us to act proactively. Essentially this is AI testing as a service.
b. Litmus provides a diagnosis of the AI risks, but we also need a solution once those risks are detected. In the AI world, guardrails ensure that AI systems operate within ethical, legal, and functional boundaries. We are building Sentinel, a platform that provides guardrails as a service for the Government’s AI applications. Product teams can choose from a curated list of guardrails, including those from top AI developers and localised ones like LionGuard, and easily integrate these into their applications. Sentinel has been able to accurately identify attempts to infiltrate systems or trick AI models into producing inappropriate output.
c. Litmus and Sentinel demonstrate how we want to develop Government Generative AI applications that are safe for use, including by members of the public.
Conclusion
18. Sir, our digital infrastructure underpins key functions that citizens and businesses rely on. We have therefore actively invested in enhancing the security, resilience and future-readiness of our key digital infrastructure. We also continue to build capabilities in the public sector, and embrace experimentation and innovation with AI, to better serve Singaporeans. I am hopeful that this will build trust in our digital future as we continue on our Smart Nation journey.
19. Thank you.