Singtel and DART launch cybersecurity training programme to strengthen cyber defences across Singapore’s enterprises, including Critical Information Infrastructure sectors

The programme will equip cybersecurity professionals with advanced skills to detect and respond to Advanced Persistent Threats (APTs) targeting Information Technology (IT) and Operational Technology (OT) environments

Singtel and cybersecurity training provider, DART, launched the Advanced Persistent Threat Detection and Response Programme, to strengthen cyber resilience across enterprises, including Critical Information Infrastructure (CII) Owners. The programme aims to equip cybersecurity professionals responsible for protecting essential services with practical skills to detect, investigate and respond to increasingly sophisticated cyberattacks, such as APTs.

Singapore’s Critical Information Infrastructure (CII) spans 11 sectors^[1], providing essential services to the nation. A cyberattack on these systems could disrupt the delivery of essential services, with potentially serious consequences for Singapore’s economy and society.

The growing sophistication of cyber threats has made strengthening these defences increasingly urgent. According to the CSA, Singapore experienced a four-fold increase in APT attacks between 2021 and 2024. In 2025, Singapore also revealed that its CII had been targeted by APT actor UNC3886, underscoring the importance of strengthening cybersecurity capabilities to safeguard its essential services.

Developed by Singtel and DART, the five-day programme will focus on strengthening the capabilities of cybersecurity practitioners across enterprises, including those from CII sectors, while supporting CII Owners in developing competencies relevant to the updated Cybersecurity Code of Practice (CCoP). Through hands-on training, participants will learn to identify, investigate and respond to APTs, AI-enabled attacks and other emerging threats targeting both IT and OT environments. The programme complements the Cyber Security Agency of Singapore's (CSA) broader efforts to strengthen CII owners' cybersecurity capabilities and resilience through targeted training and competency development.

The programme costs S$8,000 per participant, with eligible participants receiving subsidies of up to nearly 90%, bringing the course fee down to just S$1,000, subject to applicable funding conditions.

Mr Ng Tian Chong, Chief Executive Officer, Singtel Singapore, said: “As a CII operator ourselves, we understand first-hand the responsibility of protecting the essential services that people and businesses depend on every day. With cyber threats becoming increasingly sophisticated, no organisation can tackle these challenges alone. Strengthening Singapore’s cyber resilience requires a collective effort, with organisations sharing expertise, building capabilities and learning from one another. Through this programme, we aim to contribute our experience and help equip more cybersecurity professionals with the skills to protect our critical infrastructure and keep Singapore safe and resilient.”

Mr Ong Kok Wee, Assistant Chief Executive, Policy and Corporate Development, Cyber Security Agency of Singapore (CSA), said: “Skilled cybersecurity professionals are at the heart of strong cyber defences. Equipping them with the capabilities to detect and respond effectively to sophisticated threats, including Advanced Persistent Threats (APTs) and AI-enabled threats, is critical to strengthening Singapore’s cyber resilience. Beyond technical knowledge, hands-on training is essential to build the practical capabilities needed to tackle real-world threats. We welcome initiatives such as this programme by Singtel and DART, which complement CSA’s efforts to strengthen the cyber resilience of our CIIs.”

Mr Omry Hayon, Vice President of Professional Services, DART Consulting and Training said: “As cyber threats become more sophisticated, the people protecting our critical infrastructure need more than theoretical knowledge. They need practical experience responding to realistic attacks and making decisions under pressure. Through this programme, we want to give cybersecurity practitioners the opportunity to build and test those capabilities in hands-on environments, so they are better prepared to detect, respond to and recover from real-world threats.”

Building practical capabilities to defend critical infrastructure

As the appointed SkillsFuture Queen Bee for cybersecurity, Singtel is leading the efforts to strengthen industry capabilities and develop a skilled cybersecurity workforce. Under this programme, Singtel brings its training expertise and infrastructure, including a customised OT environment that allows participants to practise responding to cyber threats in realistic settings. CSA has worked with Singtel and DART to review and provide inputs to the training curriculum to ensure that the programme is relevant to the cybersecurity capability needs of Singapore's CII sectors, while DART will draw on its operational cybersecurity experience to develop hands-on practical exercises and cyber range that are designed to equip participants with real-world threat detection and response skills.

Participants can choose between two specialised tracks:

1. IT track covers network architecture, security gaps, detection and incident response,

2. OT track focuses on threat hunting, anomaly detection, network architecture and incident response in systems supporting critical operations.

Both tracks culminate in a simulated APT incident on a CII network, where participants investigate and respond to the attack, followed by a practical assessment and online quiz.

The first OT classes will run from 23 to 27 November and 14 to 18 December 2026, while the IT classes will run from 30 November to 4 December 2026 and 11 to 15 January 2027. Each class can accommodate up to 20 participants from different organisations.

Though the programme is designed for cybersecurity personnel from CII organisations, it is also open to cybersecurity practitioners from other enterprises seeking to strengthen their technical capabilities. Participants should have at least one year of cybersecurity experience, basic networking and security knowledge, and be familiar with programming language, Python and network traffic analysis tool, Wireshark.