iERP
Enables businesses to manage and integrate core operations through a unified platform.
Q1 🔴 Mandatory - Business Data Extraction
Main Question: Can your solution enable SMEs to efficiently extract business data in various discrete formats such as CSV, XLSX, XML, and TSV?
Example: Users can export data from the digital solution into CSV format for integration with third-party analytics tools or convert records into XLSX for detailed reporting, documentation, or compliance purposes.
Q2 🟡 Preferred - Personal Data Protection
Main Question: Can your solution demonstrate compliance with the following Personal Data Protection requirements?
Additional Note: Digital solutions that collect, use, disclose, process or dispose personal data should incorporate features that support the obligations under the Personal Data Protection Act (2020).
To comply with this requirement, you MUST complete the Personal Data Protection Requirements form at https://go.gov.sg/pdp.
Please note that this requirement is Mandatory for the following iERP modules: (1) Sales & CRM Module (2) HR Management
Q3 🔴 Mandatory - Vulnerability Assessment/Penetration Testing (VA/PT)
Main Question: Has your solution undergone a comprehensive security vulnerability assessment/penetration testing (VA/PT) conducted by a qualified third-party within the last 12 months?
Scope Requirements: The scope of the VA/PT must cover network security; application security; data protection measures and access control (if applicable); API security testing (if applicable); Cloud security configuration review (if applicable). Specifically, for web application security, the scope must cover minimally all OWASP Top 10 vulnerabilities.
Submission Requirements: Please submit the VA/PT report (dated maximum 1 year from the checklist submission date). The VA/PT Report must include Executive summary; Detailed findings and risk ratings; Remediation recommendations; Evidence of vulnerability fixes or mitigation plans; Testing methodology used; Scope of assessment; Assessor's qualifications and certifications.
If you are the reseller of the solution, please obtain the VA/PT report from your product principal. SOC 2 Type II report can be accepted if the detailed technical vulnerability assessment results are part of the SOC2 Type II scope.
Note: Qualified third-party refers to: CREST-certified companies (https://www.crest-approved.org/members/) or companies with security professional with relevant CREST certifications; Security professionals with recognised certifications such as: Offensive Security Certified Professional (OSCP); EC-Council Certified Penetration Testing Professional (CPENT); GIAC Penetration Tester (GPEN); or other equivalent industry-recognised certifications.
Click "Yes" to confirm you have completed the instructions.
Date of Issue Required: [Date Field] Upload Supporting Document Required: [File Upload] Text Elaboration Required: [Text Box for Description/Details]
Q4 🟡 Preferred - Cybersecurity Compliance - Cyber Essentials Mark (CEM)
Main Question: Are you the Product Principal of the solution that you are submitting for pre-approval?
Q5 🟡 Preferred - CEM for Product Principal
Main Question: Has your organisation achieved CSA Cyber Essentials for ICT Vendor Mark certification or equivalent recognised cybersecurity certifications (including but not limited to Cyber Trust Mark or ISO27001) that validate the implementation of appropriate security controls against common cyber threats in your organisation and the solution you are submitting for pre-approval?
Additional Note: Vendors are encouraged to comply at application and are required to meet this requirement by the Annual Review, where it will be assessed as mandatory.
Reference: For more information on Cyber Essentials mark, please refer to https://www.csa.gov.sg/cyber-essentials/
--
Q6 🔴 Mandatory Follow-up - CEM for Product Principal - Elaboration
This question appears only if you answered "Yes" to Q3
Main Question: Please specify the following information:
Submission Requirements: i. The certificate demonstrating your organisation has attained Cyber Essentials for ICT Vendors ii. The cybersecurity certification the organisation has met iii. The scope of the certification
Please also upload a copy of the Certification and indicate the Certification Issuance Date in the date field.
Click "Yes" to confirm you have completed the instructions.
Date of Issue Required: [Date Field] Upload Supporting Document Required: [File Upload] Text Elaboration Required: [Text Box for Description/Details]
Q7 🟡 Preferred - CEM for Resellers
Main Question: Has your organisation achieved CSA Cyber Essentials Mark certification or equivalent recognised cybersecurity certifications (including but not limited to Cyber Trust Mark or ISO27001) that validate the implementation of appropriate security controls against common cyber threats in your organisation and the solution you are submitting for pre-approval?
Additional Note: Vendors are encouraged to comply at application and are required to meet this requirement by the Annual Review, where it will be assessed as mandatory.
Reference: For more information on Cyber Essentials mark, please refer to https://www.csa.gov.sg/cyber-essentials/
--
Q8 🔴 Mandatory Follow-up - CEM for Resellers - Elaboration
This question appears only if you answered "Yes" to Q5
Main Question: Please specify the following information:
Submission Requirements: i. The cybersecurity certification the organisation has met ii. The scope of the certification
Please also upload a copy of the Certification and indicate the Certification Issuance Date in the date field.
Click "Yes" to confirm you have completed the instructions.
Date of Issue Required: [Date Field] Upload Supporting Document Required: [File Upload] Text Elaboration Required: [Text Box for Description/Details]
Q9 🔴 Mandatory - ERP Integration and Monitoring Capabilities (Internal)
Main Question: Does your solution ensure seamless data flow, provide comprehensive workflow documentation, and error tracking across all your ERP modules without requiring manual intervention?
Technical Requirements:
Seamless Data Flow (Internal): Your solution provides data integration for all ERP modules within your own application, ensuring a seamless and consistent information flow across all business functions without manual intervention.
Documentation (Internal): Your solution provides documentation for all inter-module workflows within your application, for ease of referencing and troubleshooting.
Audit Logging and Monitoring: Your solution provides a dashboard to track data health and transmission status across internal modules, and automatically captures logs of any errors encountered (such as user-facing error messages and error-tracking dashboards).
Q10 🟡 Preferred - ERP AI Features
Main Question: Does your solution include any AI features?
Validated features will allow your solution to be tagged as 'AI-enabled' at the package level, increasing visibility to SMEs seeking AI solutions. High adoption rates of specific use cases will be used to inform potential increases in grant support in the future.
--
Q11 🔴 Mandatory Follow-up - ERP AI Features - Breakdown
This question appears only if you answered "Yes" to Q8
Main Question: Select all that apply.
AI Feature Options:
AI-Enabled Large-Language Model Layer — An intelligent interface enabling the access and translation of complex, structured ERP data via prompting through natural language.
AI Copilot — An AI assistant that drafts and coordinates actions spanning multiple ERP modules, with human approval gates between steps.
Agentic Workflow Orchestration — An AI agent that coordinates multi-step workflows spanning modules (such as new-vendor onboarding or order-to-cash automation), with human approval gates between steps.
Others - Please specify
Text Elaboration Required: [Text Box for Description/Details]
--
Q12 🔴 Mandatory Follow-up - ERP AI Features - Others
This question appears only if you selected "Others" in Q9
Main Question: Please define any other AI capabilities your solution provides that are not covered above.
Click "Yes" to confirm you have completed the instructions.
Text Elaboration Required: [Text Box for Description/Details]
Q13 🔴 Mandatory - ERP Module Selection
Main Question: Which ERP modules does your solution provide?
Scope Requirements: Please select a minimum of at least 3 modules.
Module Options:
Q14 🟡 Preferred — "Others" Module
Main Question: Do you also provide an ERP module that is not covered by the list above (an "Others" module)?
You may submit at most 1 "Others" module, and it does not count toward the minimum of 3 modules above. Select "Yes" to declare it below.
Note 1: Processing time for this part of the checklist takes a minimum of 3 months. You are greatly encouraged to reach out to the Vendor Engagement team for a consult prior to choosing this module, to ensure that your submission has a high chance of success.
Q15 🟡 Preferred — Third-Party Integration Qualifier
Main Question: Do you want to be qualified to integrate future third-party integrations for your customers, under the iERP solution category?
Last updated
Was this helpful?