Detail

A four-pillar programme delivering cybersecurity advisory, assessment and operations services to SMEs

SINGAPORE, 19 August – Singapore Polytechnic (SP) has launched the Cybersecurity Assessment and Security Operations Centre Training Lab for Enterprises (CASTLE), a new initiative by SP's School of Computing to help small and medium-sized enterprises (SMEs) strengthen their cybersecurity while giving students hands-on industry experience.  With the launch, SP became the first Institute of Higher Learning (IHL) in Singapore licensed by the Cybersecurity Services Regulation Office (CSRO) to provide penetration testing services.  CASTLE brings together student learning, staff training, strategic industry partnerships and community outreach in a single ecosystem to support Singapore's digital resilience.

The launch comes amid growing cybersecurity challenges faced by SMEs. According to the Singapore Cyber Landscape 2024/2025 report, reported ransomware cases in Singapore increased by 21 per cent in 2024, with manufacturing and professional services sectors among the most affected. Many incidents stemmed from longstanding vulnerabilities, highlighting the need for affordable and accessible cybersecurity support for smaller businesses. CASTLE addresses this gap with a tiered range of services that help organisations to build their cyber maturity, from basic awareness and hygiene measures to advanced assessments and security operations.

Designed as a comprehensive framework for SME cybersecurity, CASTLE is built on four complementary pillars that support enterprises at different stages of their cybersecurity journey.

Pillar A: Cybersecurity Hygiene Check as a Service
Serving as the first line of defence, this advisory service helps SMEs identify immediate cybersecurity gaps and vulnerabilities within their digital infrastructure. Conducted by SP students and staff, the assessments leverage frameworks and best practices from the Cyber Security Agency of Singapore (CSA) and industry partners to provide practical recommendations that organisations can implement to improve their cyber hygiene.

Pillar B: Cybersecurity Posture Assessment as a Service
CASTLE also offers cybersecurity posture assessments, including penetration testing, vulnerability assessments and advisory services to help organisations strengthen their security defences. The service is backed by SP’s licence from the Cybersecurity Services Regulation Office (CSRO) to provide penetration testing services, the first such licence issued to an IHL in Singapore. The licence lets SP offer regulated cybersecurity assessment services to SMEs while giving students valuable real-world experience aligned with the skills required for the Offensive Security Certified Professional (OSCP) certification. Through a partnership with Offensive Security (OffSec), students have a pathway to earn the OSCP, an industry-recognised credential in offensive cybersecurity.

Pillar C: Security Operations Centre as a Service
SP has partnered with ST Engineering’s Cyber business to set up a new SME Cybersecurity Operations & Training Centre (SOC) which combines cybersecurity operations for SMEs with hands-on learning opportunities for students and educators. The live, on-campus SOC is the first of its kind within an IHL, mirroring an industry environment where students and staff analyse live threat scenarios alongside cybersecurity professionals, gaining valuable experience in security monitoring, threat detection and incident responses. This bridges the gap between classroom learning and industry practice, while strengthening the cyber resilience of SMEs.

The SOC also serves as a training facility where lecturers and industry practitioners co-conduct practical sessions based on real-world cyber operations. Students gain direct exposure to advanced cybersecurity technologies and operational practices, while internship opportunities at the SOC provide valuable industry experience and support a smoother transition from classroom to workplace.

Pillar D: Cyber Awareness Outreach and Training (CyberSAFE@SP)
CyberSAFE@SP complements CASTLE's technical services with a cybersecurity awareness programme aimed at SMEs. Delivered by SP students and staff, it gives business owners and employees a foundational understanding of cyber risks and practical guidance on safer digital practices.  SP is a member of the global Consortium of Cybersecurity Clinics. The programme also acts as an entry point for organisations looking to embark on a broader cybersecurity improvement journey through CASTLE's other services.

Strengthening Curriculum to Meet Industry Demands
SP and Athena Dynamics have signed a memorandum of understanding to build curriculum capabilities in Operational Technology (OT) and Industrial Control Systems (ICS), an area of growing importance as Singapore works to strengthen the resilience of its critical infrastructure. The collaboration will provide students with greater exposure to cybersecurity practices in industrial and operational environments, helping ensure graduates are ready to tackle emerging security challenges across critical sectors.

Developing Singapore's Future Cybersecurity Workforce
A key objective of CASTLE is to give students practical industry exposure that complements their academic learning. Through cybersecurity assessments, awareness workshops and security operations activities, students gain practical experience tackling challenges faced by businesses. CASTLE is expected to benefit more than 180 students annually through projects, internships, industry collaborations and operational training opportunities, while up to 50 SMEs are expected to benefit from its cybersecurity services and awareness programmes by mid-2027.

Powered by Industry Collaboration
CASTLE is supported by industry partners including ST Engineering, OffSec and Athena Dynamics, who provide access to industry expertise, curriculum enhancements, faculty attachments, internships and emerging technologies in cybersecurity, operational technology and industrial control systems. Together, these partnerships also keep SP's cybersecurity education closely aligned with evolving industry needs.

"Cybersecurity was once seen as a concern mainly for large organisations. Today, SMEs are just as much a target, but many simply don’t have the budget or in-house expertise to defend themselves. CASTLE was built to close that gap. As the first IHL in Singapore licensed to provide penetration testing services, SP can give students authentic industry experience while helping real businesses strengthen their defences,” said Mr Liew Chin Chuan, Director, School of Computing, Singapore Polytechnic.

Supporting Singapore's Digital Future
CASTLE supports national efforts to strengthen cybersecurity across Singapore's economy and reflects a government-industry-academia collaboration model. By combining cybersecurity services, workforce development and industry engagement, CASTLE positions SP as a leading contributor to Singapore's cybersecurity ecosystem while helping SMEs build stronger defences against a growing threat landscape.