Singapore Polytechnic (SP) has on Wednesday launched the Cybersecurity Assessment and Security Operations Centre Training Lab for Enterprises (CASTLE), a new initiative by SP’s School of Computing to help small and medium-sized enterprises (SMEs) strengthen their cybersecurity while giving students hands-on industry experience.
With the launch, SP became the first Institute of Higher Learning (IHL) in Singapore licensed by the Cybersecurity Services Regulation Office (CSRO) to provide penetration testing services, SP said in a statement.
According to the statement, CASTLE brings together student learning, staff training, strategic industry partnerships and community outreach in a single ecosystem to support Singapore’s digital resilience.
The launch comes amid growing cybersecurity challenges faced by SMEs. According to the Singapore Cyber Landscape 2024/2025 report, reported ransomware cases in Singapore increased by 21 percent in 2024, with manufacturing and professional services sectors among the most affected. Many incidents stemmed from longstanding vulnerabilities, highlighting the need for affordable and accessible cybersecurity support for smaller businesses.
CASTLE addresses this gap with a tiered range of services that help organizations to build their cyber maturity, from basic awareness and hygiene measures to advanced assessments and security operations.
Designed as a comprehensive framework for SME cybersecurity, CASTLE is built on four complementary pillars – Cybersecurity Hygiene Check as a Service; Cybersecurity Posture Assessment as a Service; Security Operations Centre as a Service; Cyber Awareness Outreach and Training (CyberSAFE@SP), that support enterprises at different stages of their cybersecurity journey.
Serving as the first line of defence, Cybersecurity Hygiene Check as a Service helps SMEs identify immediate cybersecurity gaps and vulnerabilities within their digital infrastructure.
Conducted by SP students and staff, the assessments leverage frameworks and best practices from the Cyber Security Agency of Singapore (CSA) and industry partners to provide practical recommendations that organizations can implement to improve their cyber hygiene.
CASTLE also offers cybersecurity posture assessments, including penetration testing, vulnerability assessments and advisory services to help organizations strengthen their security defenses.
The service is backed by SP’s licence from the Cybersecurity Services Regulation Office (CSRO) to provide penetration testing services, the first such licence issued to an IHL in Singapore.
The license lets SP offer regulated cybersecurity assessment services to SMEs while giving students valuable real-world experience aligned with the skills required for the Offensive Security Certified Professional (OSCP) certification.
Through a partnership with Offensive Security (OffSec), students have a pathway to earn the OSCP, an industry-recognized credential in offensive cybersecurity.
SP has also partnered with ST Engineering’s Cyber business to set up a new SME Cybersecurity Operations & Training Center (SOC) which combines cybersecurity operations for SMEs with hands-on learning opportunities for students and educators.
The live, on-campus SOC is the first of its kind within an IHL, mirroring an industry environment where students and staff analyze live threat scenarios alongside cybersecurity professionals, gaining valuable experience in security monitoring, threat detection and incident responses.
This bridges the gap between classroom learning and industry practice, while strengthening the cyber resilience of SMEs.
The SOC also serves as a training facility where lecturers and industry practitioners co-conduct practical sessions based on real-world cyber operations.
Students gain direct exposure to advanced cybersecurity technologies and operational practices, while internship opportunities at the SOC provide valuable industry experience and support a smoother transition from classroom to workplace.
Meanwhile, CyberSAFE@SP complements CASTLE’s technical services with a cybersecurity awareness program aimed at SMEs.
Delivered by SP students and staff, it gives business owners and employees a foundational understanding of cyber risks and practical guidance on safer digital practices.
It is noted that SP is a member of the global Consortium of Cybersecurity Clinics. The program also acts as an entry point for organizations looking to embark on a broader cybersecurity improvement journey through CASTLE’s other services.
SP and Athena Dynamics have also signed a memorandum of understanding to build curriculum capabilities in Operational Technology (OT) and Industrial Control Systems (ICS), an area of growing importance as Singapore works to strengthen the resilience of its critical infrastructure.
The collaboration will provide students with greater exposure to cybersecurity practices in industrial and operational environments, helping ensure graduates are ready to tackle emerging security challenges across critical sectors.
SP said a key objective of CASTLE is to give students practical industry exposure that complements their academic learning.
Through cybersecurity assessments, awareness workshops and security operations activities, students gain practical experience tackling challenges faced by businesses.
CASTLE is expected to benefit more than 180 students annually through projects, internships, industry collaborations and operational training opportunities, while up to 50 SMEs are expected to benefit from its cybersecurity services and awareness programs by mid-2027, SP added.
According to the statement, CASTLE is supported by industry partners including ST Engineering, OffSec and Athena Dynamics, who provide access to industry expertise, curriculum enhancements, faculty attachments, internships and emerging technologies in cybersecurity, operational technology and industrial control systems.
Together, these partnerships also keep SP’s cybersecurity education closely aligned with evolving industry needs.
“Cybersecurity was once seen as a concern mainly for large organizations. Today, SMEs are just as much a target, but many simply don’t have the budget or in-house expertise to defend themselves,
“CASTLE was built to close that gap. As the first IHL in Singapore licensed to provide
penetration testing services, SP can give students authentic industry experience while helping
real businesses strengthen their defenses,” said Liew Chin Chuan, Director, School of
Computing, Singapore Polytechnic.
CASTLE also supports national efforts to strengthen cybersecurity across Singapore’s economy and reflects a government-industry-academia collaboration model.
By combining cybersecurity services, workforce development and industry engagement, CASTLE positions SP as a leading contributor to Singapore’s cybersecurity ecosystem while helping SMEs build stronger defenses against a growing threat landscape, said the statement.