Singapore University of Social Sciences (SUSS) operates as Singapore's autonomous university focused on applied education and lifelong learning, serving both fresh school leavers and adult learners through flexible, modular programmes. Under Professor Tan Tai Yong's leadership, the institution has graduated over 47,000 students and currently enrolls more than 21,000 across five schools offering more than 100 undergraduate and graduate programmes in applied social sciences. The university's 3H philosophy - Head (professional competency), Heart (social awareness), and Habit (lifelong learning) - shapes an educational model designed to produce work-ready and work-adaptive graduates regardless of their age or background.
SUSS runs its infrastructure on a hybrid architecture spanning on-premises and cloud environments, with AWS powering cloud operations and Amazon Connect handling communications infrastructure. The security stack demonstrates enterprise-grade deployment: CrowdStrike for endpoint detection and response, Tenable for vulnerability management, and privileged access management (PAM) to control elevated credentials. Network security layers include firewalls, intrusion detection and prevention systems (IDS/IPS), and web application firewalls (WAF). The Microsoft 365 Security suite integrates with both Azure AD and traditional Active Directory for identity and access management across the institution's digital estate.
The security posture reflects the operational complexity of supporting 21,000+ active learners across full-time and part-time programmes, plus administrative and faculty systems. SIEM deployment provides centralized log aggregation and threat detection across the distributed environment. The tech stack suggests an organization managing both legacy directory services and modern cloud identity, typical of educational institutions balancing decades of accumulated infrastructure with newer cloud-first services. The presence of EDR, vulnerability scanning, and privileged access controls indicates maturity in endpoint protection, continuous assessment, and least-privilege enforcement across what is effectively a small city's worth of users and devices.
