UK-Singapore R&D: AI-enabled quantitative cyber assurance

SeCore is seeking an independent, eligible Singapore-registered business to collaborate on a joint UK-Singapore R&D project for the UK-Singapore CRD 2026 competition. The proposed 24-to-36-month industrial R&D project falls under Digital and Technologies, combining Artificial Intelligence and Cyber Security.

The Challenge

Most cyber-assurance and GRC tools provide compliance status, maturity ratings or technical findings. However, organisations still struggle to determine the business significance of those findings, quantify potential financial exposure and prioritise remediation according to expected risk reduction and cost.

Security evidence is also fragmented across systems and repeatedly collected for different frameworks. AI-generated recommendations may lack sufficient traceability and explanation for assurance, audit and executive decision-making.

Research and Innovation Focus

SeCore already provides an evidence-led quantitative cyber-assurance platform. This project would extend that existing capability by addressing technical and commercial uncertainties including:

• Reliably classifying and mapping heterogeneous technical and control evidence across multiple assurance frameworks

• Incorporating evidence quality, confidence, threat context and business impact into quantitative risk scoring

• Producing AI-supported remediation recommendations that are explainable, traceable and prioritised according to expected risk reduction

• Integrating the platform with partner technologies and workflows

• Validating the enhanced methodology against Singapore-based data, operating environments and pilot use cases

Expected outputs would include an enhanced platform demonstrator, a validated quantitative and AI methodology, relevant integrations and assurance mappings, pilot results and a joint commercialisation plan. The project would therefore involve substantive R&D rather than routine platform deployment or localisation.

The Proposed Collaboration

SeCore would contribute its existing platform, quantitative assurance methodology, multi-framework evidence mapping, decision-ready reporting and AI-supported remediation capabilities.

The Singapore partner would make a substantive technological contribution by helping to design local requirements and integrations, contributing relevant technical or domain expertise, supporting the validation methodology and jointly delivering real-world pilots.

We are particularly interested in Singapore cybersecurity, managed-security, IT-services, GRC, OT/IoT or technology-integration companies with:

• Relevant technical expertise and R&D capability

• Access to suitable data, operational environments or pilot customers

• Knowledge of Singapore’s cybersecurity and regulatory environment

• The ability to apply through the corresponding Enterprise Singapore programme

• An interest in jointly exploiting and commercialising the project outputs

The initial target use case would be selected with the partner based on its expertise and customer access. Potential applications include regulated enterprises, technology providers and complex supply chains.

The collaboration would be structured to give both countries a balanced technological and commercial contribution, with a joint route to market for Singapore, the UK and wider international markets.