Singapore Polytechnic (SP) has launched the Cybersecurity Assessment and Security Operations Centre Training Lab for Enterprises or CASTLE, a new initiative by SP’s School of Computing to help small and medium-sized enterprises (SMEs) strengthen their cybersecurity while giving students hands-on industry experience.
With the launch, SP became the first Institute of Higher Learning (IHL) in Singapore licensed by the Cybersecurity Services Regulation Office (CSRO) to provide penetration testing services. CASTLE brings together student learning, staff training, strategic industry partnerships and community outreach in a single ecosystem to support Singapore’s digital resilience.
The launch comes amid growing cybersecurity challenges faced by SMEs. According to the Singapore Cyber Landscape 2024/2025 report, reported ransomware cases in Singapore increased by 21 per cent in 2024, with manufacturing and professional services sectors among the most affected.
Many incidents stemmed from longstanding vulnerabilities, highlighting the need for affordable and accessible cybersecurity support for smaller businesses. CASTLE addresses this gap with a tiered range of services that help organisations to build their cyber maturity, from basic awareness and hygiene measures to advanced assessments and security operations.
Designed as a comprehensive framework for SME cybersecurity, CASTLE is built on four complementary pillars that support enterprises at different stages of their cybersecurity journey.
The program features four “pillars” — a cybersecurity hygiene check as a service; cybersecurity posture assessment as a service; security operations centre as a service; and Cyber Awareness Outreach and Training (CyberSAFE@SP).
Serving as the first line of defence, CASTLE’s advisory service helps SMEs identify immediate cybersecurity gaps and vulnerabilities within their digital infrastructure. Conducted by SP students and staff, the assessments leverage frameworks and best practices from the Cyber Security Agency of Singapore (CSA) and industry partners to provide practical recommendations that organisations can implement to improve their cyber hygiene.
CASTLE also offers cybersecurity posture assessments, including penetration testing, vulnerability assessments and advisory services to help organisations strengthen their security defences. Through a partnership with Offensive Security (OffSec), students have a pathway to earn certification as Offensive Security Certified Professional (OSCP), an industry-recognised credential in offensive cybersecurity.
Also, SP has partnered with ST Engineering’s Cyber business to set up a new SME Cybersecurity Operations & Training Centre (SOC) which combines cybersecurity operations for SMEs with hands-on learning opportunities for students and educators. This bridges the gap between classroom learning and industry practice, while strengthening the cyber resilience of SMEs.
Further, CyberSAFE@SP complements CASTLE’s technical services with a cybersecurity awareness programme aimed at SMEs. Delivered by SP students and staff, it gives business owners and employees a foundational understanding of cyber risks and practical guidance on safer digital practices.
The programme also acts as an entry point for organisations looking to embark on a broader cybersecurity improvement journey through CASTLE’s other services.
CASTLE is expected to benefit more than 180 students annually through projects, internships, industry collaborations and operational training opportunities, while up to 50 SMEs are expected to benefit from its cybersecurity services and awareness programmes by mid-2027.
The programme is supported by industry partners including ST Engineering, OffSec and Athena Dynamics, who provide access to industry expertise, curriculum enhancements, faculty attachments, internships and emerging technologies in cybersecurity, operational technology and industrial control systems.
“Cybersecurity was once seen as a concern mainly for large organisations. Today, SMEs are just as much a target, but many simply don’t have the budget or in-house expertise to defend themselves. CASTLE was built to close that gap,” said Liew Chin Chuan, director of the School of Computing at Singapore Polytechnic.
“As the first IHL in Singapore licensed to provide penetration testing services, SP can give students authentic industry experience while helping real businesses strengthen their defences,” he said.
