Singapore Polytechnic’s Cybersecurity Assessment and Security Operations Centre Training Lab for Enterprises (CASTLE) is designed to serve two needs at once: help small and medium-sized enterprises (SMEs) assess and strengthen their cybersecurity, and give students supervised experience with real business security challenges. Its reported services range from basic cyber-hygiene reviews to penetration testing and security monitoring.
3
7
12
What CASTLE offers SMEs
CASTLE is reported to provide penetration testing, vulnerability assessments and security operations centre support. Other coverage describes basic cyber reviews, more detailed system assessments, threat monitoring and employee training.
3
7
Cyber-hygiene checks are also described as drawing on frameworks and practices from Singapore’s Cyber Security Agency and industry partners. Separate coverage reports that SP plans awareness workshops to explain cyber risks and safer digital practices to businesses and employees.
3
5
These services are intended to help businesses identify weaknesses and improve their security practices. Up to 50 SMEs are expected to use CASTLE’s services and awareness programmes by mid-2027.
5
7
Why the licensing milestone matters
Launch coverage reports that SP is Singapore’s first Institute of Higher Learning licensed by the Cybersecurity Services Regulation Office to provide penetration-testing services. Penetration testing involves testing an organisation’s systems for security weaknesses so they can be addressed.
1
5
That licence supports CASTLE’s hands-on model: students can take part in work related to actual cybersecurity challenges under professional supervision, rather than relying only on simulated exercises.
12
How students gain practical experience
CASTLE connects classroom learning with industry experience through projects, internships and industry attachments. Reporting on the programme describes students applying their learning in real-world settings and working alongside practitioners.
4
8
Coverage also describes collaboration with ST Engineering to establish a security operations centre for student exposure to practical cybersecurity work. Athena Dynamics has separately announced a memorandum of understanding with SP to develop curriculum capabilities in operational technology and industrial control systems cybersecurity.
33
A reported partnership with Offensive Security links training to skills associated with the Offensive Security Certified Professional (OSCP) certification. The available reporting does not establish a guaranteed certification pathway, so students should not assume that participation in CASTLE leads directly to the credential.
9
Why the programme is timely—and what the figures show
Launch coverage citing the Singapore Cyber Landscape 2024/2025 report says reported ransomware cases rose 21% in Singapore during 2024, with manufacturing and professional services among the more affected sectors. That context highlights the importance of practical security support, but it does not establish that CASTLE will prevent attacks or reduce ransomware cases.
34
Student-benefit estimates are inconsistent across reports. One launch account says more than 180 students are expected to benefit, while another reports 400 students and 10 staff. The available information does not explain whether the figures refer to different time periods, programme components or scopes.
1
5 The reports therefore support the programme’s practical-training goal, but not a single settled student target.