Singapore Polytechnic launches CASTLE to help SMEs strengthen cyber defences

Singapore Polytechnic has introduced CASTLE, a new program aimed at assisting small and medium-sized enterprises (SMEs) in strengthening their cyber defenses. The initiative, launched through the School of Computing, provides a range of cybersecurity services, from basic hygiene checks to penetration testing and security operations support.

CASTLE aims to bridge the gap between the importance of cybersecurity and the cost and expertise required to manage it effectively. Liew Chin Chuan, Director of the School of Computing, emphasized that SMEs are increasingly targeted by cyber threats, despite often lacking the necessary resources to defend themselves. CASTLE operates on four pillars.

The first focuses on basic cybersecurity hygiene, helping SMEs identify and address vulnerabilities such as weak passwords and outdated software. The second pillar involves more advanced assessments, including penetration testing and vulnerability analysis, with the latter being conducted under the supervision of cybersecurity experts.

The third pillar introduces a Security Operations Centre as a Service model, providing SMEs with operational cyber monitoring and allowing students to gain practical experience in a live environment. The final pillar emphasizes cyber awareness and training, targeting business owners and employees to educate them on safer digital practices and the risks associated with cyber threats.

With this initiative, Singapore Polytechnic has become the first Institute of Higher Learning in Singapore licensed to provide penetration testing services. This move comes at a crucial time, as ransomware cases in Singapore increased by 21% in 2024, particularly affecting manufacturing and professional services sectors. Many breaches stem from longstanding vulnerabilities, which are prevalent in smaller firms due to limited security resources.