An economics pendant writes....
"Singapore to treat infosec as equivalent public good to fresh running water"
It's not a public good. Sure, it's good for the public, it's a good that is provided to the public but it's not a "public good". Which is something that is non-rivalrous and non-excludable. They can indeed turn your water off, it's excludable. And - barring that recycling - the water you've just drunk is not available to the next person, it's rivalrous.
The absence of pandemic cholera that results from a decent water and sewage system is indeed a public good. But the water itself isn't.
Yes, this is more than mere pendantry. Sure, infosec can be a state provided good to the public. But it's not going to be a "public good".
