Singapore Polytechnic (SP) has become the first institute of higher learning (IHL) in the country licensed by the Cybersecurity Services Regulation Office (CSRO) to provide penetration testing services, with the launch of a new initiative to help small and medium-sized enterprises (SMEs) shore up their cyber defences.
The Cybersecurity Assessment and Security Operations Centre Training Lab for Enterprises (CASTLE), launched by Singapore Polytechnic‘s School of Computing, gives SMEs access to advisory, assessment and security operations services while providing students hands-on industry experience.
Addressing a growing cybersecurity gap for SMEs
The launch comes as SMEs face mounting cybersecurity risks. According to the Singapore Cyber Landscape 2024/2025 report, reported ransomware cases in Singapore rose 21 per cent in 2024, with manufacturing and professional services among the hardest-hit sectors. SP said many incidents stemmed from longstanding vulnerabilities, underscoring the need for affordable, accessible cybersecurity support for smaller businesses.
CASTLE is structured around four pillars covering the full spectrum of an SME’s cybersecurity journey:
- Cybersecurity Hygiene Check as a Service — advisory assessments conducted by SP students and staff using frameworks from the Cyber Security Agency of Singapore and industry partners
- Cybersecurity Posture Assessment as a Service — penetration testing and vulnerability assessments under SP’s new CSRO licence, aligned with the Offensive Security Certified Professional (OSCP) pathway through a partnership with OffSec
- Security Operations Centre as a Service — a live, on-campus SOC run with ST Engineering’s Cyber business, described as the first of its kind within an IHL
- Cyber Awareness Outreach and Training (CyberSAFE@SP) — foundational cybersecurity training for SME owners and employees
Industry partnerships underpin the programme
SP has also signed a memorandum of understanding with Athena Dynamics to build curriculum capabilities in operational technology (OT) and industrial control systems (ICS), an area of growing importance as Singapore works to strengthen critical infrastructure resilience.
“Cybersecurity was once seen as a concern mainly for large organisations. Today, SMEs are just as much a target, but many simply don’t have the budget or in-house expertise to defend themselves. CASTLE was built to close that gap,” said Mr Liew Chin Chuan, Director, School of Computing, Singapore Polytechnic.
Mr Goh Eng Choon, President, Cyber at ST Engineering, said the company has helped more than 1,000 SMEs take proactive steps to strengthen their cyber resilience over the past year through its existing facility, and that the CASTLE partnership gives students the chance to deliver cybersecurity services at operational scale.
Dr David, Regional Director, APAC at OffSec, said the collaboration ensures SP students graduate with the skillsets the industry needs through authentic, industry-endorsed content and direct mentorship.
Scaling impact across students and SMEs
CASTLE is expected to benefit more than 180 students annually through projects, internships, industry collaborations and operational training, while up to 50 SMEs are expected to benefit from its cybersecurity services and awareness programmes by mid-2027. SP said the initiative reflects a government-industry-academia collaboration model supporting Singapore’s broader digital resilience efforts.
