The six-day programmes are designed for cybersecurity practitioners across enterprises, including Critical Information Infrastructure Owners (CIIOs), equipping them with practical skills to detect, investigate and respond to sophisticated cyberattacks across information technology (IT) and operational technology (OT) environments.
The two pathways are the Practitioner Technical Programme: Advanced Persistent Threat Detection and Response for IT Environment and the Practitioner Technical Programme: Advanced Persistent Threat Detection and Response for OT Environment.
Built on SANS Institute’s established courses, FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics, and ICS515: ICS Visibility, Detection, and Response, the programmes focus on developing technical expertise through practical training and realistic scenarios.
Strengthening cybersecurity across critical infrastructure
The launch comes as Singapore’s critical infrastructure operators face increasingly sophisticated cyber threats, including attacks attributed to state-sponsored threat actors.
As IT and OT environments become more interconnected, organisations face growing challenges in monitoring systems, identifying threats and coordinating incident responses across digital and operational networks.
The programmes aim to address these challenges by strengthening practitioners’ technical capabilities and improving visibility across IT and OT environments. They also support efforts to build a stronger cybersecurity skills baseline across Singapore’s critical infrastructure sector.
For CIIOs, the training provides an avenue to develop the competencies of personnel responsible for operating and managing critical systems, complementing the Cyber Security Agency of Singapore’s (CSA) broader initiatives to strengthen cybersecurity readiness and resilience.
Industry collaboration supports skills development
Mr Ong Kok Wee, Assistant Chief Executive of Policy and Corporate Development at CSA, said cybersecurity practitioners must continually improve their ability to detect and respond to increasingly sophisticated threats.
He noted that the Practitioner Technical Programme provides hands-on training opportunities for practitioners to deepen their technical expertise and apply their skills in realistic scenarios.
Mr Matthias Chia, Regional Director for Southeast and North Asia at SANS Institute, said the collaboration with CSA aims to strengthen cybersecurity capabilities across enterprises, including organisations responsible for critical infrastructure.
By combining established SANS training curricula with content tailored to CSA’s specifications, the programmes seek to help organisations ensure that personnel managing critical systems are equipped to maintain security and operational resilience.
Supporting Singapore’s cybersecurity readiness
The new training pathways reflect the growing importance of specialised cybersecurity education as organisations contend with evolving threats across interconnected digital and operational environments.
By investing in practical skills development, Singapore’s enterprises and critical infrastructure operators can strengthen their ability to identify threats, respond to incidents and protect essential services against increasingly complex cyberattacks.
For programme details and registration, visit the SANS Institute website or contact singapore@sans.org.
About SANS Institute
Founded in 1989, SANS Institute is a cybersecurity training and certification provider offering hands-on courses delivered by industry practitioners. Its training programmes are supported by certifications from the Global Information Assurance Certification (GIAC).









Leave a Reply