Meet Our SLiNGers: Gerald Huang, Cybersecurity & Governance Executive

Meet Our SLiNGers is a series featuring the faces behind everything at SLNG.

As part of Cybersecurity Awareness Month, we put the spotlight on our Cybersecurity & Governance Executive, Gerald Huang, one of the unsung heroes working hard to secure our digital systems to help ensure resilience and reliability of our operations. 

Q: Describe your typical work day.

My work day is filled with a blend of technical and non-technical tasks:

• Review threat intelligence reports and security alerts, and handle cyber incidents, if any.
• Collaborate with internal and external stakeholders to ensure compliance with regulatory requirements, and align security strategies with business objectives.
• Ensure audits and assessments are completed on time.
• Oversee the implementation of security policies, and review the effectiveness of existing security measures. 
• Engage in strategic planning sessions to anticipate possible future threats and develop long-term security plans. 

Q: What do you enjoy the most about your work?

I enjoy the dynamic nature of my role, where it is challenging to stay ahead of cyber-threats, and solve complex security issues. It is rewarding to collaborate with diverse teams to protect the organisation’s assets, and ensure compliance. The fulfilment for me comes from knowing my efforts ultimately safeguards the organisation and helps ensures operational resiliency.

Q: Why did you choose to join SLNG?

Working at SLNG provides me the chance to protect one of the nation’s critical information infrastructures. With the SLNG Terminal being a critical part of Singapore’s energy security, my role challenges me to constantly stay on my toes. I’m also intrigued by the complexity of the LNG systems, both physical and digital.

Q: Could you share a memorable experience from your career so far?

Participating in Critical Infrastructure Defence Exercise (CIDeX) 2023 was an amazing experience! As part of the Blue Team (the good guys), we worked with national agencies to defend a digital infrastructure against live simulated cyber-attacks from the Red Team. One of the scenarios included shutting down a gas plant. This exercise sharpened my instincts and technical skills, and truly showcased the Whole-of-Nation effort in boosting cybersecurity!

Q: What are some cybersecurity tips you would like to share?

• Always check the sender’s identity before clicking on links, downloading attachments or even just responding to a suspicious message. 
• Phishing emails can often look legitimate but usually have tiny errors in the sender’s address or in the message. 
• Hover over any suspicious links to see where they would take you, and be wary of emails that creates a sense of urgency or ask for your personal information. 
• If you’re unsure, verify with the organisation or sender directly using a trusted communication channel, e.g. phone call.