Singapore Polytechnic (SP) has launched the Cybersecurity Assessment and Security Operations Centre Training Lab for Enterprises (CASTLE), a new initiative by SP’s School of Computing to help strengthen cybersecurity while giving students hands-on industry experience.
With the launch, SP became the first Institute of Higher Learning (IHL) in Singapore licensed by the Cybersecurity Services Regulation Office (CSRO) to provide penetration testing services.
CASTLE brings together student learning, staff training, strategic industry partnerships and community outreach in a single ecosystem to support Singapore’s digital resilience.
According to the Singapore Cyber Landscape 2024/2025 report, reported ransomware cases in Singapore increased by 21 per cent in 2024, with manufacturing and professional services sectors among the most affected. Many incidents stemmed from longstanding vulnerabilities, highlighting the need for affordable and accessible cybersecurity support for smaller businesses.
CASTLE addresses this gap with a tiered range of services that help organisations to build their cyber maturity, from basic awareness and hygiene measures to advanced assessments and security operations.
The initiative is built on four complementary pillars that support enterprises at different stages of their cybersecurity journey.
First is Cybersecurity Hygiene Check as a Service. Serving as the first line of defence, this advisory service helps SMEs identify immediate cybersecurity gaps and vulnerabilities within their digital infrastructure.
Conducted by SP students and staff, the assessments leverage frameworks and best practices from the Cyber Security Agency of Singapore (CSA) and industry partners to provide practical recommendations that organisations can implement to improve their cyber hygiene.
Second is Cybersecurity Posture Assessment as a Service. CASTLE also offers cybersecurity posture assessments, including penetration testing, vulnerability assessments and advisory services to help organisations strengthen their security defences.
The service is backed by SP’s licence from the Cybersecurity Services Regulation Office (CSRO) to provide penetration testing services, the first such licence issued to an IHL in Singapore.
The licence lets SP offer regulated cybersecurity assessment services while giving students valuable real-world experience aligned with the skills required for the Offensive Security Certified Professional (OSCP) certification. Through a partnership with Offensive Security (OffSec), students have a pathway to earn the OSCP, an industry-recognised credential in offensive cybersecurity.
Third is Security Operations Centre as a Service. SP has partnered with ST Engineering’s Cyber business to set up a new Cybersecurity Operations & Training Centre (SOC) which combines cybersecurity operations with hands-on learning opportunities for students and educators.
The live, on-campus SOC is the first of its kind within an IHL, mirroring an industry environment where students and staff analyse live threat scenarios alongside cybersecurity professionals, gaining valuable experience in security monitoring, threat detection and incident responses. This bridges the gap between classroom learning and industry practice, while strengthening the cyber resilience of firms.
The SOC also serves as a training facility where lecturers and industry practitioners co-conduct practical sessions based on real-world cyber operations. Students gain direct exposure to advanced cybersecurity technologies and operational practices, while internship opportunities at the SOC provide valuable industry experience and support a smoother transition from classroom to workplace.
Fourth is cyber awareness outreach and training or CyberSAFE@SP. This complements CASTLE’s technical services with a cybersecurity awareness programme.
Delivered by SP students and staff, it gives business owners and employees a foundational understanding of cyber risks and practical guidance on safer digital practices. SP is a member of the global Consortium of Cybersecurity Clinics.
The programme also acts as an entry point for organisations looking to embark on a broader cybersecurity improvement journey through CASTLE’s other services.
Further, SP and Athena Dynamics have signed a memorandum of understanding to build curriculum capabilities in Operational Technology (OT) and Industrial Control Systems (ICS), an area of growing importance as Singapore works to strengthen the resilience of its critical infrastructure.
The collaboration will provide students with greater exposure to cybersecurity practices in industrial and operational environments, helping ensure graduates are ready to tackle emerging security challenges across critical sectors.
A key objective of CASTLE is to give students practical industry exposure that complements their academic learning. Through cybersecurity assessments, awareness workshops and security operations activities, students gain practical experience tackling challenges faced by businesses.
CASTLE is expected to benefit more than 180 students annually through projects, internships, industry collaborations and operational training opportunities, while up to 50 SMEs are expected to benefit from its cybersecurity services and awareness programmes by mid-2027.
CASTLE is supported by industry partners including ST Engineering, OffSec and Athena Dynamics, who provide access to industry expertise, curriculum enhancements, faculty attachments, internships and emerging technologies in cybersecurity, operational technology and industrial control systems. Together, these partnerships also keep SP’s cybersecurity education closely aligned with evolving industry needs.
“As the first IHL in Singapore licensed to provide penetration testing services, SP can give students authentic industry experience while helping real businesses strengthen their defences,” said Liew Chin Chuan, director of the School of Computing at Singapore Polytechnic.
