AsiaPulse
Insights
Editorial articles distilling key ideas and practical takeaways from every AsiaPulse conversation.
Are We Fighting Yesterday's Threats?
Why cyber defence begins with changing how we think.
Every generation inherits a different security environment.
There was a time when cyber threats were largely viewed as isolated incidents. An organisation would detect suspicious activity, investigate the breach, recover its systems and move on. Success was measured by how quickly teams could respond and restore operations.
That model has served organisations well for many years.
But it increasingly reflects a world that no longer exists.
Today’s threat environment is shaped less by isolated attacks than by persistent campaigns—carefully planned, patiently executed and designed to achieve long-term strategic objectives. For leaders across government, defence and industry, the challenge is no longer simply responding to incidents. It is recognising that the assumptions underpinning cyber resilience are themselves changing.
This Insight draws on an AsiaPulse conversation with Brigadier General Clarence Cai, Commander of the Defence Cyber Command and Defence Cyber Chief of the Singapore Armed Forces’ Digital and Intelligence Service, exploring how organisations should rethink resilience in an era of persistent competition.
The Threat Has Changed
The language we use shapes the way we prepare.
For years, cybersecurity has been framed around incidents. Something happens. A vulnerability is exploited. A response is launched.
But sophisticated adversaries increasingly operate differently.
Rather than seeking immediate disruption, they establish persistence. They observe systems, study behaviours and patiently position themselves for future advantage. Individual actions that appear insignificant on their own may, when viewed together, reveal a coordinated campaign unfolding over weeks or even months.
That distinction matters.
An incident is an event.
A campaign is a strategy.
Understanding the difference changes how organisations prepare for risk.
The objective is no longer simply to stop the next attack. It is to understand the broader intent behind seemingly unrelated events before that intent becomes visible to everyone else.
Seeing the Bigger Picture
Modern organisations generate enormous volumes of security data.
Alerts are detected within seconds. Automated systems flag anomalies continuously. Artificial intelligence is making it possible to process information faster than ever before.
Yet more information does not necessarily produce better decisions.
The real advantage lies in context.
Which events represent routine background activity?
Which anomalies are connected?
Which weak signals, when viewed collectively, point towards something more significant?
These are increasingly questions of judgement rather than technology.
The organisations most likely to succeed will not necessarily be those with the greatest number of tools. They will be those capable of connecting information across time, across systems and across organisational boundaries.
In an environment defined by persistence, understanding relationships may become more valuable than responding quickly to individual events.
Resilience Is a Shared Responsibility
Perhaps the most important implication extends beyond cybersecurity itself.
Digital resilience is no longer the responsibility of technology teams alone.
Critical infrastructure, financial systems, healthcare, communications and defence increasingly rely on interconnected digital ecosystems. A disruption affecting one organisation can quickly cascade across sectors.
No single organisation possesses complete visibility.
No single agency owns every part of the problem.
Building resilience therefore depends on trusted partnerships established long before a crisis occurs. Governments, industry, academia and technology providers each contribute different capabilities, perspectives and expertise. Together, they create a more complete understanding of an increasingly complex threat environment.
The inclusion of Digital Defence within Singapore’s Total Defence framework reflects this broader understanding: resilience is not simply a technical capability, but a national one.
Looking Ahead
Artificial intelligence will continue to reshape both opportunity and risk.
Threat actors will become faster, more adaptive and increasingly difficult to detect. Defensive technologies will evolve alongside them.
But technology alone is unlikely to determine who succeeds.
The greater challenge lies in how organisations think.
Those that continue preparing for isolated incidents may find themselves struggling against persistent campaigns.
Those that learn to recognise patterns, build trusted partnerships and understand the wider strategic environment will be better positioned to anticipate rather than merely react.
In an era of strategic competition, resilience begins with a different mental model.