MDDI 演讲稿 · 2025-03-07
高级政务部长 Janil Puthucheary 在 2025 年财政供应委员会辩论上的演讲
高级政务部长 Janil Puthucheary 在 2025 年财政供应委员会辩论上的演讲
要点
- • 政府计划于今年推出《数字基础设施法》，针对主要云服务提供商和数据中心，强制要求实施韧性与安全措施并上报中断事件。
- • 政府中央系统服务可用率在过去一年从95%提升至99.5%，并持续投入正常运行时间监控工具，并按各服务的重要程度分级部署。
- • IMDA投入最高1亿新元升级全国宽带网络，使网速最高可达当前家庭水平的十倍，10Gbps套餐价格已从一年前逾100新元降至30至70新元。
- • IMDA推出《绿色数据中心路线图》并于2024年12月启动能源效率补助金，引导数据中心在实现可持续AI算力增长的同时履行新加坡的气候承诺。
- • 安全生成式AI助手Pair Chat已被超过半数公务员使用，全政府提示词工程竞赛吸引逾1,040名公务员参与，冠军为新加坡民防部队一名消防员。
- • GovTech首届LAUNCH!黑客松计划收集到逾600个公务员创意，孵化出26个创新原型，其中包括由小学教师联合开发的学生口语即时反馈AI工具。
- • GovTech正构建两大AI安全平台——与IMDA Moonshot合作开发的安全测试工具Litmus，以及提供"护栏即服务"的Sentinel平台，确保政府生成式AI应用对公众安全可用。
完整译文（中文）
MDDI 英文原文译文 · 翻译日期: 2026-06-21
1. 谢谢主席先生。感谢各位议员提出的削减动议和问题，我希望在今天的回应中，一并回应 Jessica Tan 女士、Tin Pei Ling 女士、Ong Hua Han 先生、Sharael Taha 先生、Dennis Tan 先生和 Mariam Jaafar 女士所提交的削减动议。
2. 主席先生，信任是我们智慧国工作的核心。公民和企业必须对他们所依赖的数字系统和服务，以及他们所进行的互动和交易，充满信心，相信这些都是值得信赖的。
3. 我将阐述 MDDI 建立这种信任的方式：通过确保关键数字基础设施的韧性、安全性和前瞻性，以及推动政府采用人工智能并为公共利益开展创新。
维护关键数字基础设施和服务的韧性与安全
4. 政府现有的法规旨在降低数字基础设施和服务面临的风险，包括网络攻击和服务中断。例如：
a. 根据《电信法》，IMDA 要求宽带和移动网络运营商采取主动措施，将中断情况降至最低。
b. 数字服务领域也有行业监管规定，例如 MAS 对金融机构提出的 IT 韧性和安全要求。
5. 然而，数字领域的范围远不止于此，且在持续演变。数据中心和云服务等数字基础设施已在支持众多功能方面发挥着重要作用，包括网上银行与支付、网约车、电子商务以及数字身份认证。这些功能让公民能够便捷高效地满足日常需求，也有助于企业发展。然而，数字基础设施规模的扩大和复杂程度的提升，也意味着网络攻击的攻击面随之增大，硬件故障、配置错误及其他问题引发中断的风险也有所上升。一旦发生中断，鉴于这些服务的使用率持续提高，其影响将更为显著。
6. 去年，我们修订了《网络安全法》，以应对运营环境中出现的新挑战。
a. 这些修订预计将于今年晚些时候生效，将赋权网络安全局（CSA）更好地确保关键信息基础设施以外的重要实体和系统的网络安全，包括数据中心和云服务。这反过来将提升各界对新加坡及我们数字经济的信任与信心。我们也希望关键信息基础设施的所有者能够借此机会审视其商业模式，希望他们能受到鼓励，以采用商业云解决方案等新技术为目标，重新审视其商业模式。
7. 除网络威胁外，我们还必须防范干扰数字基础设施和服务访问的其他风险，包括火灾等实体危险，以及硬件故障和系统配置错误等较为隐蔽的风险。
8. 这些风险源于我们对数字基础设施和服务的依赖。我们无法完全消除风险，因此必须通过降低中断发生的频率和减轻其影响来提升我们的应对准备能力。
9. 我们正致力于今年推出一部新法律，名为《数字基础设施法》。该法将提升新加坡的数字韧性和安全性，针对基础性数字基础设施，首先从主要云服务提供商和数据中心入手。
a. 该法将要求主要运营商采取措施，维护其韧性和安全性，并将中断情况降至最低。
b. 我们正在研究要求主要运营商向政府报告中断情况的规定，以便能从这些事件中更好地学习和改进，并在必要时支持应对和恢复工作。
c. 自2024年中起，我们一直在向数字基础设施提供商及其部分客户征求反馈意见。
10. 资讯通信媒体发展局（IMDA）近期为云服务提供商和数据中心发布了《咨询指导方针》。这些指导方针包含我们一直与利益相关方磋商的关键措施。
a. 该指导方针鼓励数据中心运营商建立健全的业务连续性系统，并确保为企业客户提供高可用性服务。
b. 云服务提供商也被鼓励管理数据安全风险，并确保制定业务连续性计划。
c. 所有运营商均被鼓励实施相关措施，包括微软（Microsoft）、Equinix 和吉宝（Keppel）在内的众多提供商及其企业客户已对新《咨询指导方针》表示支持，认为其切合实际且符合国际标准。
11. 我们也在加强政府系统的韧性，以确保新加坡人在与政府进行网上互动时能够充满信任和信心。
a. 我们已提升各机构所使用中央系统的韧性。过去一年，这些系统的服务可用率从95%提升至99.5%。我们将继续推广工具的采用，以提升政府应用程序的韧性，包括用于监控系统正常运行时间的工具。
b. 由于韧性措施会产生成本，我们的方式必须经过合理调校。我们将支持提供重要服务的机构在适当情况下实施更完善的措施。
12. 政府有必要管理对个人信息的访问，因为此类信息可能被诈骗手段所利用。
a. 我们致力于确保数据（包括个人数据）得到谨慎且负责任的管理。
b. 在政府提供涉及数据的数字服务时，各机构必须针对每个使用场景评估利益与风险之间的适当平衡，以在 MDDI 所提供的指导方针和保障措施框架下，实现服务可及性与数据保护的双重目标。
确保数字基础设施的前瞻性
13. 主席先生，我们的数字基础设施不仅必须安全可靠、具备韧性，还必须为新加坡面向未来做好布局。
14. 去年，我们宣布 IMDA 将投资最多1亿新元，升级全国宽带网络（NBN）。这将使宽带速度比目前大多数家庭的速度提升最多10倍。
a. 运营商已开始以更低的价格提供更高速度的宽带服务。10 Gig 套餐的价格现已介于30至70新元之间，而一年前则超过100新元。
15. 建设面向未来的数字基础设施，还需要在追求增长的同时应对资源约束。我们必须探索支持新加坡人工智能雄心与履行气候承诺兼顾的路径，并在数字基础设施增长与环境可持续性之间取得平衡。
a. IMDA 去年发布了《绿色数据中心路线图》，引导数据中心提升能效、使用绿色能源，以可持续方式扩大 AI 算力。我们已取得良好进展。例如，BCA-IMDA 数据中心绿色标志于去年十月更新，进一步提高了数据中心可持续性标准。IMDA 也于去年十二月推出了面向数据中心行业的能效补贴计划，支持企业升级更节能的 IT 设备。
b. MDDI 正在探索通过监管进一步提升数据中心可持续性的途径。我们正在研究其他司法管辖区的做法，并与业界展开初步磋商，以制定适合新加坡实际情况的框架。
以不同方式推进数字政府建设
16. 议长先生，作为数字政府，我们必须以身作则。我们必须持续培养公共部门创建和实验人工智能的能力，并开发以公民为中心的解决方案。
a. 我们已在公共服务系统内提供顶级 AI 及大型语言模型工具（LLM 工具）的访问权限。Pair Chat 是一款快速、安全的生成式 AI 助手，目前已有逾半数公共服务人员使用。去年，我们举办了一场全政府范围的提示词工程竞赛，吸引了超过 1,040 名公务员参与。光是能说出这件事，就已经说明我们在"推进数字政府"方面相当与众不同——政府内部举办了一场提示词工程竞赛，且有 1,040 名公务员参与其中。决赛选手的任务是在 10 分钟内使用 LLM 工具搭建一个活动宣传网站。本次竞赛的冠军是 Muhammad Naim Bin Zahari，他是 SCDF 的一名消防员，参赛时刚刚完成了一班 24 小时的轮班。亚军是 Rachel Tiang，她是 MOM 的财务官员。两人均非从事 AI 相关工作的技术人员。然而他们和所有参赛者一样，完全有能力在 10 分钟内借助这些 AI 和 LLM 增强工具搭建出功能完整的宣传网站。
b. 我们积极让非技术类公务员参与数字产品的创建。去年，GovTech 举办了首届面向公务员的系列黑客马拉松活动，称为 LAUNCH! 计划。活动征集到逾 600 个创意，孵化出 26 个创新原型。例如，由两名小学教师和一名 GovTech 官员组成的团队，开发了一款 AI 工具原型，可即时为学生提供个性化的口语表现反馈。
c. 我们也在探索如何让公务员借助 AI 实现更快、更好的创新。在我们近期举办的 Hack for Public Good 黑客马拉松上，有一个名为 Spaceship 的原型工具，旨在降低公务员进行原型开发的难度。Spaceship 让公务员能够使用 AI 智能体构建和部署功能完整的原型应用，包括基于 LLM 的工具，且全程仅需使用简单的英文指令。这是一款让非技术类公务员仅凭普通英语、在数分钟内将创意转化为可用应用的工具。我亲自试用了这个原型，尝试让它编写一个限制国会议员发言时长的门户网站。它确实在电子表格中加入了相应筛选功能，但我认为这已是目前技术的极限所在。
17. 随着政府对 AI 的使用不断增加，理解并降低 AI 应用中的风险至关重要。GovTech 正在构建相关能力，以确保政府的生成式 AI 应用能够安全上市。
a. 我们开发了 Litmus，一款用于 AI 安全测试的工具。我们精心设计了一套测试方案，确保我们的 AI 应用能够抵御误导用户或造成声誉损害的风险。Litmus 与 IMDA 的 Moonshot 合作开发，将于今年正式推出。根据与各政府机构的测试结果，我们已看到 Litmus 能够提前发现潜在安全问题，使我们得以主动应对。本质上，这是一种"AI 测试即服务"的模式。
b. Litmus 提供 AI 风险诊断，但一旦检测到风险，我们还需要相应的解决方案。在 AI 领域，"护栏"确保 AI 系统在伦理、法律和功能边界内运行。我们正在构建 Sentinel，一个为政府 AI 应用提供"护栏即服务"的平台。产品团队可从精选的护栏列表中进行选择，其中包括顶级 AI 开发商提供的护栏，以及 LionGuard 等本地化护栏，并可轻松将其集成到各自的应用中。Sentinel 已能够准确识别渗透系统或诱导 AI 模型产生不当输出的企图。
c. Litmus 和 Sentinel 体现了我们开发政府生成式 AI 应用的方向——确保包括公众在内的所有用户都能安全使用。
结语
18. 议长先生，我们的数字基础设施是公民和企业赖以运作的关键功能的基础。因此，我们积极投入，提升关键数字基础设施的安全性、韧性与面向未来的能力。我们也持续在公共部门培养能力，拥抱 AI 实验与创新，以更好地服务新加坡人。我相信，这将在我们持续推进智慧国家建设之旅的过程中，为我们的数字未来建立信任。
19. 谢谢。
英文原文
MDDI 官网原始记录 · 抓取日期: 2026-06-21
1. Thank you, Mr Chairman. I thank the Members for their cuts and questions, and I hope in my response today to be addressing cuts filed by Ms Jessica Tan, Ms Tin Pei Ling, Mr Ong Hua Han, Mr Sharael Taha, Mr Dennis Tan and Ms Mariam Jaafar.
2. Sir, trust is at the heart of our Smart Nation efforts. Our citizens and businesses must be confident that the digital systems and services that they rely on, and the interactions and transactions that they engage in, can be trusted.
3. I will explain MDDI’s approach to building this trust: by ensuring the resilience, security and future-readiness of key digital infrastructure, and by driving Government AI adoption and innovation for the public good.
Upholding Resilience and Security of Key Digital Infrastructure and Services
4. The Government has existing regulations to reduce risks to digital infrastructure and services, including cyber-attacks and service disruptions. For example:
a. Under the Telecommunications Act, IMDA requires broadband and mobile network operators to take proactive measures to minimise disruptions.
b. There are also sectoral regulations for digital services, such as MAS’ IT resilience and security requirements for financial institutions.
5. But the digital landscape is much bigger, and constantly evolving. Digital infrastructure like data centres and cloud services have become important in enabling many functions including e-banking and payments, ride-hailing, e-commerce, and digital identity. These functions allow citizens to meet their day-to-day needs and do so conveniently and effectively. They help businesses to grow. However, the growing scale and complexity of our digital infrastructure also mean an increased surface area for cyber-attacks, and a higher risk of disruptions arising from hardware failures, misconfigurations, and other problems. Should these disruptions occur, the impact is higher given the increasing utilisation of these services.
6. Last year, we amended the Cybersecurity Act to address new challenges in our operating environment.
a. These amendments, which are expected to come into force later this year, will empower CSA, the Cybersecurity Agency, to better ensure the cybersecurity of important entities and systems beyond the Critical Information Infrastructure. These include data centres and cloud services. This in turn improves trust and confidence in Singapore and our digital economy. Owners of Critical Information Infrastructure also have the opportunity, we hope, to review their business models. We hope that they will be encouraged to review their business models and do so with a view to using new technologies such as commercial cloud solutions.
7. Beyond cyber threats, we must guard against risks that disrupt access to digital infrastructure and services, including physical hazards like fires, and less visible risks like hardware failure and system misconfiguration.
8. These are risks as a result of our dependence on digital infrastructure and services. We cannot eliminate risk completely, so we must enhance our preparedness by reducing the occurrence and the impact of disruptions.
9. We are working towards introducing a new law this year, called the Digital Infrastructure Act. This will improve Singapore’s digital resilience and security. The Act targets foundational digital infrastructure, starting with major cloud service providers and data centres.
a. The Act will require major operators to implement measures to uphold their resilience and security, and to minimise disruptions.
b. We are studying requirements for major operators to report disruptions to the Government, so that we can better learn and improve from these incidents, and support response and recovery efforts where needed.
c. We have been seeking feedback from digital infrastructure providers and some of their customers, since mid-2024.
10. The Infocomm Media Development Authority, IMDA, recently released Advisory Guidelines for cloud service providers and data centres. These guidelines contain key measures that we have been consulting stakeholders on.
a. The guidelines encourage data centre operators to have a robust business continuity system and ensure high availability for their enterprise customers.
b. Cloud service providers are also encouraged to manage data security risks, and ensure business continuity planning.
c. All operators are encouraged to implement the measures, and many providers including Microsoft, Equinix and Keppel, and their enterprise customers, have expressed support for the new Advisory Guidelines, which they find to be fit for purpose and aligned with international standards.
11. We are also strengthening the resilience of our Government systems to ensure that Singaporeans have trust and confidence when interacting with the Government online.
a. We have improved the resilience of central systems used by Agencies. Service availability for these systems rose from 95% to 99.5% in the last year. We will continue to increase the adoption of tools to improve the resilience of Government applications, including those that monitor system uptime.
b. As resilience measures incur costs, our approach must be calibrated. We will support Agencies providing important services to implement more sophisticated measures where appropriate.
12. There is a need for Government to manage access to information about individuals, as such information could be exploited in scam tactics.
a. We are committed to ensure that data, including personal data, is managed carefully and responsibly.
b. In the Government’s provision of the digital services involving data, Agencies must assess the right balance between the benefits and risks in each use case, to achieve the dual objectives of service accessibility and data protection, in line with the guidelines and safeguards that MDDI has provided.
Ensuring Future-Readiness of our Digital Infrastructure
13. Sir, our digital infrastructure must not only be secure and resilient, but also position Singapore for the future.
14. Last year, we announced that IMDA is investing up to $100 million to upgrade our Nationwide Broadband Network (NBN). This will enable broadband speeds up to 10 times faster than what most households have today.
a. Operators are starting to offer higher speed broadband services at lower prices. A 10 Gig plan now costs between $30 to $70, compared to more than $100 a year ago.
15. Developing our future-ready digital infrastructure also entails addressing resource constraints as we pursue growth. We must explore ways to support Singapore’s AI ambitions while keeping to our climate commitments, as well as balance digital infrastructure growth with environmental sustainability.
a. IMDA launched the Green Data Centre Roadmap last year to guide data centres to improve energy efficiency and use green energy to grow AI compute capacity sustainably. We have made good progress. For example, the BCA-IMDA Green Mark for data centres was refreshed last October to raise the bar for data centre sustainability. IMDA also launched the Energy Efficiency Grant for the data centre sector last December to support businesses’ upgrades to more energy efficient IT equipment.
b. MDDI is exploring further ways to uplift data centre sustainability through regulations. We are studying other jurisdictions and are in early engagement with industry to develop a framework for Singapore’s context.
Doing Digital Government Differently
16. Sir, we have to lead by example, as a Digital Government. We must continue to build the capabilities for the public sector to create and experiment with AI, and unlock citizen-centric solutions.
a. We have made available within the Public Service access to best-in-class AI and Large Language Model tools, LLM tools. Pair Chat is a fast and secure generative AI assistant used by more than half the Public Service today. Last year, we organised a whole-of-government prompt engineering competition. This attracted over 1,040 officers. The fact that I can say this already makes us quite unusual in terms of how we ‘do Digital Government’ – that we have a prompt engineering competition within Government and that there were 1,040 officers who participated. The finalists were tasked to build an event publicity website within 10 minutes using LLM tools. The winner of this competition was Muhammad Naim Bin Zahari, a firefighter with SCDF. At the time of the competition, he had just completed a 24-hour shift. In second place was Rachel Tiang, a finance officer at MOM. Neither were in technical roles dealing with AI. Both of them and all the competitors were more than capable of building this functioning publicity website within 10 minutes using these AI and LLM-augmented tools.
b. We actively involve non-technical public officers in creating digital products. Last year, GovTech held its inaugural series of hackathons for public officers, called the LAUNCH! Programme. It gathered more than 600 ideas and birthed 26 innovative prototypes. For example, a team of two primary school teachers and a GovTech officer prototyped an AI tool to provide students with immediate customised feedback on their oral skills performance.
c. We are also exploring how officers can innovate better and faster with AI. One of the prototypes from our recent Hack for Public Good hackathon was Spaceship, a tool to make prototyping less daunting for public officers. Spaceship enables officers to use AI agents to build and deploy fully functional prototype applications, including LLM-based tools. They do this using just plain English. This is a tool for non-technical public officers to get from an idea to a workable app in minutes using just plain English. I tried out this prototype, and I tried to have it code a portal that restricted the length of MPs’ speeches. It put the appropriate filter into the spreadsheet, but I think that is the limit of the technology today.
17. As we increase the use of AI in Government, it is critical to understand and mitigate the risks in AI applications. GovTech is building the capabilities to ensure that the Government’s Generative AI applications go-to-market safely.
a. We have Litmus, a tool for AI safety and security testing. We have curated a set of tests to ensure our AI applications are resistant to risks that mislead users or cause reputational harm. Litmus is built in partnership with IMDA’s Moonshot, and will be launched this year. Based on tests with Agencies, we have seen how Litmus can spot potential safety issues ahead of time, allowing us to act proactively. Essentially this is AI testing as a service.
b. Litmus provides a diagnosis of the AI risks, but we also need a solution once those risks are detected. In the AI world, guardrails ensure that AI systems operate within ethical, legal, and functional boundaries. We are building Sentinel, a platform that provides guardrails as a service for the Government’s AI applications. Product teams can choose from a curated list of guardrails, including those from top AI developers and localised ones like LionGuard, and easily integrate these into their applications. Sentinel has been able to accurately identify attempts to infiltrate systems or trick AI models into producing inappropriate output.
c. Litmus and Sentinel demonstrate how we want to develop Government Generative AI applications that are safe for use, including by members of the public.
Conclusion
18. Sir, our digital infrastructure underpins key functions that citizens and businesses rely on. We have therefore actively invested in enhancing the security, resilience and future-readiness of our key digital infrastructure. We also continue to build capabilities in the public sector, and embrace experimentation and innovation with AI, to better serve Singaporeans. I am hopeful that this will build trust in our digital future as we continue on our Smart Nation journey.
19. Thank you.