Singapore Polytechnic (SP) has launched the Cybersecurity Assessment and Security Operations Centre Training Lab for Enterprises (CASTLE), a four-pillar programme designed to strengthen cybersecurity for small and medium-sized enterprises (SMEs) while providing students with hands-on industry experience.
SP becomes the first Institute of Higher Learning (IHL) in Singapore licensed by the Cybersecurity Services Regulation Office (CSRO) to provide penetration testing services.
The initiative comes amid growing cybersecurity challenges. According to the Singapore Cyber Landscape 2024/2025 report, reported ransomware cases in Singapore increased by 21% in 2024, with manufacturing and professional services sectors among the most affected.
Many incidents stemmed from longstanding vulnerabilities, highlighting the need for affordable and accessible cybersecurity support. CASTLE addresses this gap with a tiered range of services that help organisations build cyber maturity, from basic awareness and hygiene measures to advanced assessments and security operations.
Four pillars supporting enterprises at different stages
CASTLE is built on four complementary pillars. Pillar A, Cybersecurity Hygiene Check as a Service, serves as the first line of defence, helping SMEs identify immediate cybersecurity gaps and vulnerabilities within their digital infrastructure. Conducted by SP students and staff, the assessments leverage frameworks and best practices from the Cyber Security Agency of Singapore (CSA) and industry partners to provide practical recommendations.
Pillar B, Cybersecurity Posture Assessment as a Service, offers cybersecurity posture assessments, including penetration testing, vulnerability assessments and advisory services. Backed by SP’s CSRO licence, the service lets SP offer regulated cybersecurity assessment services while giving students real-world experience aligned with skills required for the Offensive Security Certified Professional (OSCP) certification. Through a partnership with Offensive Security (OffSec), students have a pathway to earn the OSCP, an industry-recognised credential in offensive cybersecurity.
Pillar C, Security Operations Centre as a Service, sees SP partner with ST Engineering’s Cyber business to set up a new SME Cybersecurity Operations & Training Centre (SOC). The live, on-campus SOC is the first of its kind within an IHL, mirroring an industry environment where students and staff analyse live threat scenarios alongside cybersecurity professionals, gaining experience in security monitoring, threat detection and incident response. The SOC also serves as a training facility where lecturers and industry practitioners co-conduct practical sessions based on real-world cyber operations.
Pillar D, Cyber Awareness Outreach and Training (CyberSAFE@SP), complements CASTLE’s technical services with a cybersecurity awareness programme aimed at SMEs. Delivered by SP students and staff, it gives business owners and employees a foundational understanding of cyber risks and practical guidance on safer digital practices. SP is a member of the global Consortium of Cybersecurity Clinics, and the programme acts as an entry point for organisations looking to embark on a broader cybersecurity improvement journey through CASTLE’s other services.
Strengthening curriculum and workforce development
SP and Athena Dynamics have signed a memorandum of understanding to build curriculum capabilities in Operational Technology (OT) and Industrial Control Systems (ICS), an area of growing importance as Singapore works to strengthen the resilience of its critical infrastructure. The collaboration will provide students with greater exposure to cybersecurity practices in industrial and operational environments.
A key objective of CASTLE is to give students practical industry exposure. Through cybersecurity assessments, awareness workshops and security operations activities, students gain experience tackling challenges faced by businesses.
CASTLE is expected to benefit more than 180 students annually through projects, internships, industry collaborations and operational training opportunities, while up to 50 SMEs are expected to benefit from its cybersecurity services and awareness programmes by mid-2027.
“Cybersecurity was once seen as a concern mainly for large organisations. Today, SMEs are just as much a target, but many simply don’t have the budget or in-house expertise to defend themselves. CASTLE was built to close that gap. As the first IHL in Singapore licensed to provide penetration testing services, SP can give students authentic industry experience while helping real businesses strengthen their defences,” said Liew Chin Chuan, director, School of Computing, Singapore Polytechnic.
