InstrumentGuidance

Securing Agentic AI, Addendum to the Guidelines and Companion Guide on Securing AI Systems

Is this legally binding?

Guidance. Voluntary guidance. Best practice, not obligation, until a contract or a regulator cites it.

CSA's final Addendum on securing agentic AI systems, officially published 17 June 2026 (version 1.0) after public consultation 22 October, 31 December 2025. Addresses rogue actions and sensitive data disclosure via autonomy assessment, threat modelling and lifecycle controls. Voluntary.

From the source
“This document is intended for informational purposes only and is not mandatory, prescriptive nor exhaustive.”
Addendum v1.0 (June 2026), Version History

csa.gov.sg Show it on the map

Instrument record

Short name: CSA Agentic Addendum
Date: 2026-06-17
Version: v1.0
Cluster: core

What this connects to

6 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.

Issued by1

AgencyCyber Security Agency of SingaporeGuidance

Cites1

InstrumentCSA Guidelines and Companion Guide on Securing AI SystemsGuidance
Addendum is designed to be read alongside, and builds on, the 2024 Guidelines and Companion Guide

Cited by2

InstrumentModel AI Governance Framework for Agentic AIGuidance
Agentic MGF footnotes 1, 12 and text adapt from CSA Draft Addendum on Securing Agentic AI
ObligationPerform threat modelling and taint tracingGuidance
'organisations may refer to CSA's Draft Addendum on Securing Agentic AI' for threat modelling and taint tracing

Maps across to2

External frameworkArticle 15: Accuracy, robustness and cybersecurityBindingGAGE analysis, not official
CSA's agentic security controls directly address Article 15 cybersecurity and robustness concerns
External frameworkClause 6: PlanningStandardGAGE analysis, not official
Agentic autonomy-aware risk assessment aligns with AIMS risk planning

Learn this properly

This page tells you what this instrument is and whether it binds you. The AI Governance program teaches the whole discipline, with dedicated coverage of the Singapore governance stack and the MAS regime, and every topic is passed by explaining it back in your own words, graded against the source.

See the AI Governance program

Verified against the official source on 2026-08-17. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.

Useful to someone you work with?

Credential program

Earn a verifiable AI governance credential. The first module is free.

Singapore governs AI through guidance, supervisory expectation and one binding data law, which means the hard part is not finding the rule. It is deciding what your organization does when nothing is strictly mandatory and everything is expected.

Certified AI Governance Professional (CAIGP) is fourteen modules of exactly that work: you run an organization through the AI era, make decisions that can fail, and leave with a record an employer can verify.

14 modules, 98 topics, each with a lesson and a graded quiz.
Opens with “Why decisions, not information, will make you the expert”, and the whole first module is free.
The Professor answers your questions inside every topic.
A mastery exam at the end, then a credential anyone you send it to can verify.
Your progress is saved to your account, on any device.