Building Digital Resilience: Exercise SG Ready 2026 Lessons

13 Feb 2026


Singapore has never been shy about taking preparedness seriously, and 2026 is no different. Exercise SG Ready (ESR) was launched on 1 February 2026 at the Total Defence Commemoration Event held at Our Tampines Hub. Marking the occasion alongside community leaders and organisational representatives were Senior Minister of State for Defence Mr Zaqy Mohamad as well as Minister for Digital Development and Information Mrs Josephine Teo – a clear signal of just how seriously the government is treating this issue.

The exercise runs from 1 February to 15 February, with more than 1,000 organisations participating in simulated disruption activities designed to test real-world readiness. This year's edition focuses on two key scenarios that hit close to home for everyday Singaporeans and businesses alike: degraded digital connectivity and prolonged power outages. In short, ESR 2026 is asking everyone, including individuals, communities, and companies, a very direct question: “Are you ready?”

Why this exercise matters now more than ever

The timing of ESR 2026 is not coincidental. In his broadcast message, Coordinating Minister for National Security Mr K Shanmugam reminded Singaporeans that Singapore's critical infrastructure faced a cyberattack last year from a highly sophisticated actor, one capable of disrupting essential services. Foreign parties had also attempted to divide communities and erode trust in the government.

These aren't abstract threats. They're the kind of disruptions that can affect hospitals, financial systems, transport networks, and the devices we rely on every single day. For businesses, it's a stark reminder that investing in robust cybersecurity services in Singapore is no longer a luxury but a baseline necessity.

As cybersecurity trends to watch in 2026 continue to evolve, ESR 2026 gives organisations a structured way to stress-test how they would actually cope when things go wrong.

What ESR 2026 actually involves

The exercise is co-led by MINDEF alongside key partners, including the Singapore Civil Defence Force (SCDF), People's Association (PA), Energy Market Authority (EMA), and Infocomm Media Development Authority (IMDA). Its framework encourages everyone to do three things: Plan for disruptions, Prepare to respond, and Play your part in keeping Singapore strong.

One of the most notable new additions this year is the pilot rollout of the National Simulated Scams Exercise (NSSE), a collaborative effort between the Ministry of Home Affairs and the Cyber Security Agency of Singapore. This feeds directly into ESR 2026's wider mission and reflects the growing reality that scams are now a front-line threat to both individuals and organisations.

There was also a pilot Community Mobilisation activity at two HDB blocks in Tampines, where newly introduced Total Defence Champions (TDCs) worked alongside PA Community Emergency Response Team (CERT) volunteers. During a simulated scenario involving a power outage and degraded digital connectivity, these volunteers reached out to households, shared key information, and identified residents who needed assistance. It was community resilience in action, one that’s practical, human, and grounded.

Lessons businesses can take away

Whether you run a small business or manage a large enterprise, ESR 2026 offers a useful lens through which to review your own readiness. Here are the key takeaways worth acting on.

1. Review your business continuity plan honestly

Many organisations have a plan sitting in a drawer somewhere. ESR 2026 is an invitation to actually test it. What happens if your team loses internet access for 24 hours? What if your payment systems go down? Run the scenario before it runs you.

2. Don't assume your vendors are prepared either

Digital resilience isn't just about your own systems. If your suppliers, cloud providers, or software platforms go down, your business feels it too. Ask the hard questions about their contingency plans.

3. Train your people, not just your systems

Technology can only do so much. Human error remains one of the biggest vulnerabilities in any organisation. Regular training on spotting phishing attempts, handling suspicious communications, and following clear escalation procedures makes a real difference.

4. Make communication plans before you need them

If your usual digital channels go down, how do you reach your team, your clients, or your customers? A simple offline communication protocol, even just a shared phone list, can prevent chaos.

5. Test your backups

This sounds obvious, but many businesses discover their backups don't actually work when they most need them. ESR 2026 is a good prompt to verify your data recovery processes are functional and up to date.

The bigger picture: Shared responsibility

One of the most resonant messages from this year's exercise came from Minister Josephine Teo, who said it plainly: "Staying prepared is not something we do alone, it is a shared responsibility." That framing is important. Resilience isn't built by any single entity, but the sum of many individuals, organisations, and communities making deliberate choices to be ready.

ESR 2026 also broadened its reach by using the ERP 2.0 On-Board Units to broadcast alert messages to motorists, alongside the Public Warning System "Important Message" signal broadcast across the island at 3pm on launch day. These are infrastructure tests, checking whether the systems meant to warn us actually work when it counts.

For businesses, this shared responsibility means stepping up to play an active role in national resilience, not simply waiting for government guidance after the fact. Engaging in exercises like ESR, reviewing internal protocols, and building genuine digital preparedness into everyday operations is how Singapore as a whole stays strong.

Conclusion

Exercise SG Ready 2026 is a timely reminder that preparedness isn't a one-off task but an ongoing commitment. If you're looking to take the lessons from ESR 2026 and turn them into concrete action for your organisation, Group8 can help. From cybersecurity assessments to tailored continuity planning, Group8 works with businesses across Singapore to build the kind of digital resilience that holds up when it matters most. Get in touch with us today and take your first real step towards being genuinely ready.