Singapore moves to govern agentic AI and quantum computing

Singapore is positioning itself at the forefront of the technological revolution, recognizing that the rapid emergence of agentic Artificial Intelligence (AI) and quantum computing demands an urgent, thoughtful, and proactive approach to governance. Instead of reactive regulation, the nation is choosing “proactive preparation”, a strategy driven by a commitment to public trust, safety, and global cooperation.

Agentic AI systems can operate autonomously, making decisions and taking actions without direct human intervention. This capacity, while promising for amplifying human abilities and enhancing public services, raises complex questions of accountability and liability when systems malfunction or behave unpredictably.

To address the unique risks—such as rogue actions and sensitive data exposure—Singapore, through the Cyber Security Agency of Singapore (CSA), has released an addendum to its existing guidelines on securing AI systems, specifically focused on Securing Agentic AI. This addendum, which builds on the existing framework, introduces additional measures for:

• Mapping agent workflows.
• Assessing vulnerabilities.
• Implementing security controls across development and deployment.

The country is fostering a learning environment through practical experimentation. Initiatives like the GovTech-Google Cloud sandbox allow public agencies to test and evaluate cutting-edge agentic AI capabilities within controlled environments. This real-world deployment serves as a “living laboratory” to reveal the necessary safeguards, ensuring that users feel secure enough to explore the technology within clearly defined boundaries. Furthermore, Singapore adopts a sectoral approach to AI governance, ensuring measures are proportionate to risk; for example, financial decisions and medical diagnoses receive higher scrutiny and validation standards than entertainment recommendations. The guiding principle remains: “the higher the autonomy, the stronger the assurance needed,” with humans retaining ultimate responsibility.

Alongside AI, quantum computing poses a different, but equally profound, disruption: the potential to break current encryption systems. A quantum breakthrough anywhere could affect encryption everywhere, compromising everything from national security to financial transactions. To mitigate this existential threat, particularly the risk of “harvest-now, decrypt-later” attacks—where data stolen today could be compromised once quantum technology matures—Singapore is taking early action.

The CSA has launched new resources to guide the transition to quantum-safe encryption:

• Quantum-Safe Handbook: Developed with GovTech and IMDA, this resource provides guidance for organizations, particularly critical infrastructure owners, to prepare for the transition to quantum-safe cryptography. It highlights key domains such as Risk Assessment, Governance, and Technology.
• Quantum Readiness Index: This is a self-assessment tool designed to help organizations gauge their preparedness and prioritize actions for quantum-safe migration, aiming to plug the current gap of organizational hesitation.

Recognizing that neither AI nor quantum technology respects borders, Singapore is underscoring the vital need for international cooperation. Coordinated governance frameworks are essential for companies and governments to align on standards, share threat intelligence, and respond swiftly to emerging risks.

To bolster collective resilience against AI-driven cyber threats, the CSA will sign Memoranda of Cooperation (MOCs) with major technology firms like Google, Amazon Web Services (AWS), and TRM Labs. Furthermore, Singapore is actively working to create interoperable governance frameworks globally. This includes aligning tools like the AI Verify toolkit with international standards such as the G7 Hiroshima AI Process principles and embedding governance principles into digital economy agreements.

Singapore’s strategy—anchored in early action, cooperative governance, and transparent public engagement—offers a powerful blueprint. The core ambition is clear: by embracing collaboration and accountability with a sense of urgency, the nation aims to ensure that technology serves society, and not the other way around.