SANS Institute launches IT and OT training tracks for Singapore critical infrastructure
New specialized pathways aim to strengthen cybersecurity capabilities for practitioners managing advanced persistent threats in enterprise environments across Singapore.

Key points
- SANS Institute introduced two new technical training tracks for IT and OT environments in Singapore.
- The programs are built on established courses FOR508 and ICS515 to address advanced persistent threats.
- The initiative supports the Cyber Security Agency of Singapore’s efforts to boost critical infrastructure resilience.
SANS Institute has launched dedicated training tracks designed to strengthen cybersecurity capabilities for practitioners in Singapore, according to a report by Industrial Cyber. The new programs target enterprises, including critical information infrastructure sectors, aiming to improve defenses against advanced persistent threats across digital and operational environments.
Two specialized pathways have been introduced: the IT Track Practitioner Technical Programme for Advanced Persistent Threat Detection and Response in IT Environments, and the OT Track Practitioner Technical Programme for Advanced Persistent Threat Detection and Response in OT Environments. These tracks are built upon SANS Institute’s established courses, specifically FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics, and ICS515: ICS Visibility, Detection, and Response.
Context and Background
The programs are designed to lift the baseline readiness of Singapore’s critical information infrastructure sector as a whole. According to Industrial Cyber, the tracks help close the visibility gap between enterprise IT and operational systems as these environments converge. They also aim to build collective resilience against evolving threat actors known to target Singapore’s critical infrastructure.
Chief Information Security Officers in Singapore face sophisticated attacks, including those from state-sponsored threat actors. The new programs support efforts to develop the cybersecurity competencies of personnel responsible for operating and managing these systems. This allows staff to perform their roles more effectively in an increasingly complex threat landscape.
Who Is Affected
The training complements the broader efforts of the Cyber Security Agency of Singapore to strengthen the cybersecurity capabilities and resilience of critical infrastructure owners. Ong Kok Wee, Assistant Chief Executive for Policy and Corporate Development at the agency, noted that practitioners need to continually strengthen their capabilities to detect and respond to cyber threats.
Ong stated that the Practitioner Technical Programme complements these efforts by providing hands-on training opportunities. These sessions allow practitioners to deepen their technical expertise and apply their skills in realistic scenarios. This focus on practical application addresses the need for specialized skills in managing advanced persistent threats.
What should you do?
Security leaders in critical infrastructure sectors should evaluate whether their current training programs address the convergence of IT and OT environments. Organizations should review their existing visibility between enterprise IT and operational systems to identify gaps. Professionals should consider how hands-on training can improve their incident response and threat hunting capabilities.
Background: Digital forensics
Digital forensics provides concrete evidence of compromise scope and attacker tactics. It cannot reconstruct deleted data or guarantee identification of the threat actor. Its value depends on whether you need legal proof or operational containment.
Read the full guide: Digital Forensics: Real Benefits and Hard Limitations
What to do and how to stay safe: SANS Institute
- Review current cybersecurity training programs to ensure they address both IT and OT environment convergence.
- Assess visibility gaps between enterprise IT systems and operational technology networks.
- Identify opportunities for hands-on training in advanced persistent threat detection and response.
- Align internal competency development with national cybersecurity agency guidelines for critical infrastructure.
Step-by-step guide: Mobile Device Security: How to Protect Data Beyond Passwords
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What are the names of the new training tracks launched by SANS Institute?
The tracks are the IT Track Practitioner Technical Programme for Advanced Persistent Threat Detection and Response for IT Environment and the OT Track Practitioner Technical Programme for Advanced Persistent Threat Detection and Response for OT Environment.
Which existing SANS courses form the basis of these new programs?
The programs are built on FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics and ICS515: ICS Visibility, Detection, and Response.
How does this initiative relate to the Cyber Security Agency of Singapore?
The programs complement the agency’s broader efforts to strengthen critical infrastructure owners’ cybersecurity capabilities and resilience through targeted training and competency development.


