Singapore rolls out testing guide, accreditation program for agentic AI

Singapore’s Infocomm Media Development Authority and the AI Verify Foundation announced three initiatives for agentic AI on Oct. 15: a testing guide, a program to accredit AI testing firms and a cybersecurity taskforce. The announcements came at the AI Assurance Exchange in Singapore, co-organized by SGTech during Singapore International Cyber Week.

The measures address a challenge for organizations deploying agents that can use tools and take actions: testing must account not just for whether a system can complete a task, but whether it might do so without authorization or after being misled by information it encounters. The initiatives focus on testing and assurance rather than establishing a new legal requirement, according to the descriptions available at launch.

IMDA’s Starter Kit for Testing Agentic Systems for Safety and Reliability lays out four phases: identifying an agent’s risks and capabilities, designing tests, analyzing results against deployment-specific risk tolerances, and monitoring the system over time. Its suggested tests include probing for prompt injection, checking whether an agent respects authorization boundaries and examining whether human approval mechanisms work before consequential actions.

The guide also treats evaluation as an ongoing process. Its premise is that behavior can change when an underlying model is updated, or when the deployment environment and threat landscape shift. That makes a pre-launch test only one part of the assessment, rather than a lasting guarantee of safe behavior.

More than 20 participants, including Google, AWS and AI safety firm Resaro, contributed to developing the guide, Tech Times reported. Resaro was also among the five firms in the inaugural accreditation cohort, alongside AIDX Tech, Knovel Engineering, PwC Singapore and Vulcan. The outlet did not report an official assessment of that overlap.

The AI Tester Accreditation Programme, or AI TAP, evaluates firms on technical competence, track record, operational capabilities and financial sustainability. Accreditation lasts one year and must be renewed. The initial roster offers organizations a formal credential to consider when selecting testing providers, though five firms is a small starting pool.

The third initiative, the Frontier AI Resilience and Security Taskforce, brings together more than 20 industry leaders and technical experts to examine AI-related cyber risks in the information and communications and media sector. Its work includes threat detection and response, network resilience, and cataloguing offensive capabilities. A report with practical guidelines and best practices is expected in the first half of 2027.

The announcements build on Singapore’s earlier agentic AI governance work, including a framework launched in January 2026 and a cybersecurity addendum on agentic AI released in June, according to Tech Times. The new package adds testing guidance, a route for recognizing testing providers and a forum for sector-specific threat analysis. Whether Singapore later makes assurance requirements mandatory remains unsettled; the source describes that possibility as speculation, not a stated policy decision.