Singapore Geopolitical Strategic Assessment 2026

Singapore's Systemic Vulnerability Index (SVI) stands at 5.5/10. It is a well-run, well-financed city-state that imports nearly every physical input of national life and has no treaty power obliged to defend it. Its money is safe. Its supply lines, networks and alignment posture are exposed. Singapore can pay for almost any shock, but it cannot always obtain delivery.

The five domains sit close together, which pulls the headline toward the middle of the scale. Resources is most exposed at 5.84, followed by Intelligence at 5.78, Preservation at 5.62, Game at 5.05 and Identity at 5.04. Less than a point separates top from bottom. No single domain is in distress.

The average hides a sharp split within each domain:

• Most exposed: Eleven of fifty components score 6.0 or above. Energy supply chain — fuel and power imports (E2) is the most vulnerable in the assessment at 7.5.
• Least exposed: Three components score at or below 3.0, all financial:
  • Capital market access and external financing (E7) is the least vulnerable in the assessment at 2.4.
  • Currency stability and reserves position (E8) scores 2.8.
  • Fiscal sustainability — debt and deficit structure (E9) scores 2.9.

The pattern is bimodal. Financial capacity sits at the floor of the range. Physical delivery sits near the top.

Across the games Singapore plays (sea-lane logistics, the US-China alignment contest, input dependence on its neighbours, and rule-shaping in multilateral forums), its position holds while the flows hold. It wins on institutions, credit and reputation. It loses ground where geography, suppliers and great-power choices set the terms. The actionable risk is concentrated. It lies in a small set of physical and digital channels through which shocks would travel faster than money can reroute them, and not in solvency, legitimacy or cohesion.

Key findings

1. Energy is the single most exposed point, and the gas mix is shifting toward the seaborne route.

Energy supply chain — fuel and power imports (E2) scores 7.5, the highest in the assessment. Singapore imported 11 Mtoe of natural gas in 2024, of which 6 Mtoe was LNG. Pipeline gas imports fell 7.0% while LNG imports rose 13.0% [#17]. Power generation runs on these imports: 10,533 ktoe (123 TWh) of energy inputs produced 60 TWh of gross electricity output in 2024, up 2.5% on 2023. The Energy Market Authority also records that electricity imports have increased since 2023 [#18].

The direction matters as much as the level. More supply now arrives by sea, through the same lanes that carry the rest of the economy, which ties energy exposure directly to chokepoint exposure. The Defence Minister made the dependency explicit in Parliament on 27 February 2026: Singapore's lack of domestic resources and its reliance on international trade make it susceptible to external disruptions [#271].

2. The economy runs through chokepoints it does not control, and its flagship industry depends on inputs it cannot make.

Trade route and logistics chokepoints (E5) and Critical materials and industrial inputs (E4) are tied at 6.8, the joint second-highest scores in the Resources domain.

• Port volumes: Singapore handled a record 44.66 million TEUs of container throughput in 2025, up 8.6% from 2024, and a record 3.22 billion GT of vessel arrivals, up 3.5% [#63].
• Transshipment dependence: Around 90% of container throughput is transshipment. The port authority describes Singapore as the world's largest container transshipment hub, with 41.12 million TEU in 2024 [#643]. A disruption to the lanes is a disruption to the business itself.
• Cable concentration: All new submarine cables must land at three designated sites (Changi Site 1A, Tuas West and Tuas South) [#413]. Singapore was the landing spot for no fewer than 25 cable systems as of August 2022 [#335].
• Semiconductor inputs: The industry relies on over 100 specialised chemicals and materials, often available only from specific countries [#53]. 98% of its value-added derives from exports, the highest export dependency of any Singapore industry in 2022, and Singapore contributes 10% of global semiconductor output [#54].

The flagship sector sits between two dependencies: specialised inputs in, finished output out, both moving through the same lanes.

3. A persistent, state-level cyber actor has reached the telecoms backbone, and criminal intrusion is rising beneath it.

National cyber defence and incident response (P2) is the most exposed component in the Preservation domain at 6.25. Cyber threat detection and monitoring (I2) scores 6.4, the second-highest in the Intelligence domain.

• The telecoms campaign: On 9 February 2026, the Cyber Security Agency and IMDA disclosed that the advanced persistent threat (APT) actor UNC3886 ran a deliberate, targeted and well-planned campaign against the telecoms sector. All four major telcos (M1, SIMBA Telecom, Singtel and StarHub) were targeted. In one instance a zero-day exploit bypassed a perimeter firewall, and a small amount of technical data, believed to be network-related, was exfiltrated [#414]. CSA had already named UNC3886 as a group focused on high-value strategic targets including critical infrastructure, and reported that APT activity against Singapore keeps growing in scale and sophistication [#151].
• The criminal layer: CSA recorded 159 ransomware cases in 2024, up from 132 in 2023. Infected infrastructure rose 67% to 117,300 systems, from 70,200 [#302].

The institutional response is real:

• Since 31 October 2025, owners of critical information infrastructure (CII) must report suspected APT-caused incidents to CSA within 2 hours of becoming aware [#303].
• Exercise Cyber Star brought close to 500 participants from CII owners across 11 sectors into an 11-day national cyber crisis drill [#181].
• The Defence Cyber Command was inaugurated on 18 March 2025, citing an alarming increase in the frequency, sophistication and scale of cyber threats against critical infrastructure [#167].

The picture is a capable defender facing an adversary already inside the network core. The telecoms backbone is the channel through which every other domain communicates.

4. Food and water arrive from outside, and the main water contract has a fixed end date.

Food and water security (E3) scores 6.2.

• Food: Singapore imports more than 90% of its food. Malaysian chicken accounted for 34% of total chicken imports and 99% of live and chilled chicken imports, about 73,000 tonnes in 2021. Those figures sit behind Singapore's exposure to Malaysia's 2022 chicken export ban [#711].
• Water: Supply comes from Four National Taps: local catchment, imported water from Johor, NEWater and desalinated seawater [#36]. The 1962 Johor River Water Agreement allows Singapore to draw up to 250 million gallons a day and expires in 2061 [#37].

NEWater and desalination are the hedge. Both draw on the energy system described in the first finding, so the water hedge carries the energy exposure inside it.

5. The information space is the softest institutional point, and the protections built for it also narrow it.

Public information channels and media ecosystem (I9) scores 7.2, the highest in the Intelligence domain and the second-highest in the assessment.

• Freedom House's Freedom in the World 2026 rates Singapore "Partly Free" with a global freedom score of 48/100, unchanged from the previous year. Political Rights score 19/40 and Civil Liberties 29/60 [#477].
• Freedom House assesses that the electoral and legal framework built by the People's Action Party (PAP) constrains opposition growth and limits freedoms of expression, assembly and association [#539].
• Its 2024 report recorded harsh civil and criminal penalties for speech deemed seditious, defamatory or injurious to religious sensitivities [#478].

The state's legal arsenal against foreign manipulation is extensive:

• POFMA was passed on 8 May 2019 and the Foreign Interference (Countermeasures) Act (FICA) on 4 October 2021 [#428].
• FICA's hostile-information-campaign provisions took effect on 7 July 2022 [#394].
• Parliament's Select Committee found that Singapore is a target of hostile disinformation operations [#395].

The state can act fast against foreign campaigns, yet its information ecosystem draws a weaker external rating. That weakness counts most when the public must judge competing accounts during a crisis.

6. The security architecture is dense but carries no guarantee, and the alignment posture is under pressure from both sides.

Alliance and security-guarantee moat (P7) scores 6.1. Neutrality / alignment position (X5) scores 5.8, the highest in the Game domain.

• The US relationship: It rests on the 1990 MOU for US use of facilities, extended for another 15 years by the 2019 Protocol of Amendment, together with the 2005 Strategic Framework Agreement and the 2015 enhanced Defence Cooperation Agreement [#228]. The 2005 agreement recognises Singapore as a Major Security Cooperation Partner of the United States [#229].
• Exercises: The SAF and US Marine Corps ran the 28th edition of Exercise Valiant Mark from 27 April to 8 May 2026 [#589]. Five Power Defence Arrangements chiefs endorsed a five-year roadmap and an Exercise Concept Directive 2025 [#588].
• The government's own reading: In January 2026 MINDEF told Parliament that the SAF must keep building unique capabilities for its own operational and deterrence purposes, so that other countries want to partner with it [#139]. Partnership must be earned, not assumed.

The voting record keeps the posture principled and costly to both sides. Singapore has called Russia's invasion of Ukraine a clear violation of international law and the UN Charter [#660]. On 10 May 2024 it voted for the UNGA resolution supporting Palestine's admission as a UN member [#661].

7. The financial buffers can absorb almost any shock that money can solve.

The three least vulnerable components in the assessment are all financial:

• E7 (2.4): Singapore holds AAA/Aaa ratings from Moody's, S&P, Fitch and R&I in both local and foreign currency [#91].
• E8 (2.8): Total reserves stood at 4.39 months of imports in 2025 [#101].
• E9 (2.9): The Ministry of Finance reports a revised FY2025 overall surplus of S$15.10 billion (1.9% of GDP) and an estimated FY2026 surplus of S$8.54 billion (1.0% of GDP) [#114]. Government borrowing under the Significant Infrastructure Government Loan Act is authorised up to S$90 billion for long-term infrastructure [#115].

The banking core is sound but carries named watch items. Domestic systemically important banks hold about 66 percent of banking assets, with a CET1 ratio of 16.6 percent in 2024Q3 against a 9 percent minimum [#77]. The IMF has asked MAS to keep strengthening oversight of non-bank financial institutions and to improve data on bank–NBFI linkages [#76].

8. Cohesion and legitimacy hold, and the strain is generational.

Governing legitimacy — performance (S6) scores 3.35; only the three financial components (E7, E8, E9) score lower. The economy has repeatedly beaten official expectations: MTI raised its 2025 growth forecast from 0.0–2.0% in May, to 1.5–2.5% in August, to around 4.0% in November [#524].

Generational cohesion (S5) is the most exposed component in the Identity domain at 5.6.

• Ageing: Citizens aged 65 and above rose to 21.4% in June 2026, from 20.7% a year earlier [#128]. The government estimates that by 2035 more than 1 in 4 citizens will be 65 or older [#512].
• Births and marriages: Citizen births fell from 29,237 in 2024 to 26,071 in 2025 [#128].
• Sentiment: A parliamentary question cites the 2026 Edelman Trust Barometer as finding that only 31% of residents believe the next generation will be better off. That figure was stated in the question and not verified against Edelman's own report [#561].

The labour pool depends on foreign workers. The foreign workforce reached 1,655,900 in June 2026 [#127]. Labour and talent supply (E10) scores 6.0.

The most dangerous cascade path

The critical route runs from Singapore's external posture, through the strait and the energy system, into the networks that coordinate response.

1. The trigger is alignment pressure. It enters through the posture both blocs can press: X5 at 5.8 and P7 at 6.1, with no treaty guarantor behind the security web [#228][#229].
2. Pressure transmits through the sea lanes. It moves into trade route and logistics (E5, 6.8), where about 90% of container throughput is transshipment [#643].
3. The lanes carry a growing share of fuel. LNG imports rose 13.0% while pipeline gas fell 7.0% [#17]. A lane disruption becomes an energy event (E2, 7.5).
4. Energy feeds the water hedge. Power drives NEWater and desalination, so the energy event threatens the hedge against the Johor tap's eventual expiry [#36][#37].
5. Coordination runs over compromised networks. The response travels over telecoms networks already penetrated by UNC3886 [#414], with critical-infrastructure monitoring pressed by a rising volume of infected systems [#302].
6. The public reads the crisis through a contested information space. The ecosystem carries the assessment's second-highest score (I9, 7.2) and is a documented target of hostile disinformation [#395].

The route's danger lies in its bypass of financial strength. The AAA ratings, surpluses and reserves (E7, E8, E9) sit outside the path. Money can buy cargoes and pay for rerouting. It cannot reopen a lane, decontaminate a backbone, or restore public confidence in a contested account of events within the hours a crisis allows.

The path also runs against the state's recorded strengths at its far end. Crisis command is well-established:

• The COVID-19 Multi-Ministry Task Force was set up on 22 January 2020, the day before the first confirmed case, and was supported by the Homefront Crisis Executive Group [#352].
• The same executive structure ran the 2003 SARS response [#369].
• More than 1,000 personnel from SPF, SAF and SCDF exercised mall-shooting and Changi hijack scenarios in May 2026 [#370].

The weak link is the channel those commands depend on. The command itself is sound.

Secondary path. The second route runs through the financial centre's reputation:

• The 2026 FATF/APG evaluation found that beneficial-ownership information for legal persons is available but largely unverified beyond customer due diligence [#209].
• MAS's own 2024 risk assessment rates the threat of regional corruption proceeds being laundered through Singapore as high [#624].

A scandal that crossed into sector reputation would test the rule-of-law advantage. That advantage is real: Institutional and legal moat — rule of law (P5) is the least exposed component in the Preservation domain at 4.4. Singapore ranked 3rd of 180 in the 2025 Corruption Perceptions Index with 84/100, as reported by the Corrupt Practices Investigation Bureau (CPIB) [#195].

Strategic bottom line

Treat Singapore as a creditworthy, competently governed counterparty with a delivery problem. It has no solvency problem. Lending, investment and institutional partnership risk is low. Continuity-of-supply risk and network-integrity risk are not.

What Singapore must do first, in order of how far each step cuts the dangerous path:

1. Harden the telecoms core against the actor already inside it.

   • The 9 February 2026 disclosure establishes that a zero-day bypassed a perimeter firewall in at least one major telco [#414].
   • The 2-hour reporting obligation [#303] gives the state visibility. It does not give the networks resilience.
   • Network segmentation, hunt operations and tested failover across all four operators come first, because every other crisis response runs on these networks.

2. Turn financial depth into physical energy redundancy.

   • The fuel mix is moving toward seaborne LNG [#17], and electricity imports are rising [#18].
   • The fiscal room exists: an FY2026 surplus of S$8.54 billion [#114] and borrowing authority of up to S$90 billion for long-term infrastructure [#115].
   • Storage, supplier spread and import-route diversity convert that money into time, the one buffer the energy system lacks.

3. Lock in the water and food hedges before the Johor horizon closes.

   • The 2061 expiry is fixed [#37].
   • The NEWater and desalination taps [#36] must be sized and powered on the assumption that the energy shock and the water shock arrive together.
   • Food sourcing must keep moving away from single-origin dependence of the kind exposed by Malaysian chicken [#711].

4. Keep the alignment posture costly to coerce.

   • The partnership calendar holds: Valiant Mark [#589] and the FPDA roadmap [#588].
   • So does the principled voting record [#660][#661].
   • Both depend on Singapore remaining useful to each side, which is MINDEF's own stated logic [#139].

What to watch:

• Telecoms and CII disclosures: Any further CSA or IMDA disclosure naming UNC3886 or another APT against telecoms or critical infrastructure. A second backbone disclosure would move the cyber exposure from contained to persistent.
• Fuel mix: The next Singapore Energy Statistics release. A continued rise in LNG's share alongside a further fall in pipeline gas confirms the seaborne tilt [#17].
• Ransomware and infected systems: The next CSA cyber landscape report. The series stands at 159 ransomware cases in 2024, up from 132 in 2023 [#302]. A further rise in infected systems would signal monitoring falling behind volume.
• Money-laundering follow-up: Actions on beneficial-ownership verification after the 2026 mutual evaluation [#209]. Delay carries reputational risk to the financial centre.
• Water negotiations: Any change in Johor water arrangements or Malaysian export controls on staples [#37][#711].
• Generational sentiment: Movement in measures of whether the next generation will be better off [#561], and the next citizen birth count, which fell to 26,071 in 2025 [#128]. Slippage is slow, but it erodes the performance legitimacy that currently anchors the Identity domain.

What is not known. Two facts remain open:

• Data sovereignty. The capacity exists: IMDA reports a regional data-centre hub exceeding 1.4 gigawatts [#334]. What is not established is how much of the state's and critical sectors' data sits with foreign cloud providers under foreign law. Data infrastructure and data sovereignty (I4) is the most thinly documented component in the dossier. An IMDA or government cloud-dependency disclosure would show it.
• Strategic stocks. The level of fuel and food stocks behind the import dependencies is not established. Energy Market Authority and Singapore Food Agency stockholding data would settle the point.

Until both are known, read the energy and data findings as exposure confirmed and buffer size unconfirmed.