From traditional compliance checklists and fragmented reporting to a future-ready platform to consolidate, clarify, and actively manage its cyber risks
Customer Case Study
Client
Industry
Primary Uses
Singapore Management University (SMU)
Higher Education
Cyber Risk Management
Singapore Management University (SMU), a leading higher education institution in Singapore, recognized that modern cybersecurity challenges demanded more than traditional compliance checklists or fragmented reporting.
With increasing regulatory expectations and growing digital exposure across departments, SMU sought a future-ready platform to consolidate, clarify, and actively manage its cyber risks.
The Challenge
Before adopting Commugen’s Cyber GRC Automation Platform, SMU lacked a platform to provide a consolidated view of its cyber risks.
Different systems and manual processes created complexity and required significant effort to maintain oversight.
Key challenges included:
-
​Distributed oversight – risk information was managed across multiple clusters and tools, making it harder to see the complete picture.
-
Time-intensive reporting – preparing audit responses and management updates required substantial manual coordination.
-
Visibility gaps – aligning people, process, and technical risk data into one consolidated view was a recurring challenge
The Solution
Guided by Commugen’s cybersecurity specialists and implementation partner Athena Dynamics, SMU deployed Commugen’s no-code, cyber-specific GRC platform.
The solution was designed to be flexible, adaptable, and able to integrate with SMU’s existing systems without disrupting operations.
Implementation Highlights:
-
People - Correlated phishing test outcomes with employee security awareness training, providing measurable insights into awareness effectiveness.
-
Processes - Integrated key compliance frameworks such as ISO 27001 and CSA Cyber Trust, enabling automated mapping between risk assessments and controls.
-
Systems - Connected SMU’s CMDB to automatically map CVEs to installed software, creating a real-time vulnerability map for IT leadership.
“What impressed me was how quickly the platform adapted to our workflows; we didn’t have to change how we work.”
- Mr. Lau Kai Cheong, CIO, Singapore Management University
Mr. Lau Kai Cheong
CISO and VP of IT, Singapore Management University (SMU)
Results & Benefits
Commugen’s platform provided SMU with enhanced visibility, stronger collaboration, and measurable operational efficiency.
By automating manual tasks and centralizing data, SMU’s cybersecurity management evolved from reactive monitoring to proactive governance.
Key results included:
-
Unified Dashboard - A consolidated view of risks across people, processes, and systems, providing leadership with actionable insight.
-
Improved Collaboration - IT, Information Security, and business units now align around a shared understanding of cyber risk.
-
Time Savings - A significant reduction in audit preparation and compliance reporting effort, allowing teams to focus on continuous improvement.
-
Executive Readiness - Clear, data-driven dashboards and summaries support transparent communication with senior management.
"What is not visible, you cannot manage effectively. To manage it transparently and holistically, you need all your risk elements in one place, on one platform," explains Mr Lau Kai Cheong.
Conclusion
Through its collaboration with Commugen and Athena Dynamics, SMU successfully transitioned from fragmented oversight to a unified, data-driven cybersecurity risk management model.
The Commugen platform empowers SMU with real-time visibility, integrated compliance insights, and a flexible foundation that will continue to evolve alongside the university’s security needs.
This partnership demonstrates how technology, adaptability, and collaboration can deliver measurable improvement in cybersecurity governance.
In collaboration with Athena Dynamics
