MULTIPLE APPROACHES CAN BE ADOPTED TO DEVELOP PADU IT SYSTEM - EXPERT

By Anas Abu Hassan

KUALA LUMPUR, March 30 (Bernama) -- The development of an information technology (IT) system such as the Central Database Hub (PADU) may involve the adoption of multiple ways which will subsequently lead to achieving the same objective, said an expert from Securemetric Bhd.

Securemetric is a prominent player in Southeast Asia specialising in cutting-edge digital security solutions, prioritising mobile security, identity security, transaction security, and revenue security.

bootstrap slideshow

Its chief executive officer and executive director, Edward Law, highlighted that in certain instances, the selection of a particular option may be influenced by various factors such as contextual considerations, situational nuances, or the legitimate rights pertinent to a business use case.

"Nevertheless, I am not in a position to comment without detailed understanding of the PADU system’s development," he told Bernama.

He was commenting on the recent media report claiming that the development of PADU utilised 'outdated' methods and could compromise its data integrity.

According to the Department of Statistics Malaysia (DoSM), the details of the PADU system and architecture are not disclosed to the public.

However, the department assured that the design of the PADU system development is the best, safe and effective as it was implemented in-house, taking into account the stated requirements and certainly the latest technology, methods and design.

“The use of API (application programming interface) is one of the important mechanisms in this PADU system and will continue to be increased based on the dynamics, complexity and availability of databases in various agencies,” it said.

In the meantime, Law noted that the intention of PADU is to eventually be able to analyse citizen household data, aiming for a more effective targeted subsidy distribution, which is certainly beneficial for the nation in the long run.

It will surely help minimise wastage while ensuring that the subsidies reach those who really need them, he added.

He also suggested that to enhance PADU's integrity, citizens accessing the system should eventually be integrated with MyDigital ID to ensure a high level of trust when logging in and accessing the system.

According to Law, CyberSecurity Malaysia (CSM), as the internationally recognised cyber security accreditation body, is believed to have conducted a thorough security assessment for PADU.

"But remember in cybersecurity, nothing is forever thus it is extremely important to continue to monitor, assess and rectify over time to ensure long-term effective defence," he added.

Meanwhile, CSM affirmed the robust security of PADU in safeguarding users' personal data and dismissed claims of possible compromises in data integrity.

Its chief executive officer, Datuk Dr. Amirudin Abdul Wahab, stressed that PADU has complied with the requirements outlined in the National Cryptography Policy. The agency has also conducted comprehensive security vulnerability assessments of PADU, including providing proactive advisory services to rectify any identified weaknesses.

Recently, the Minister of Economy, Rafizi Ramli, speaking in the Dewan Rakyat, assured that PADU remains secure despite facing over two million hacking attempts every week.

He noted that these attacks occur in various forms, including Distributed Denial of Service (DDoS) and breach attempts on the firewall since the system was launched on January 2 this year.

-- BERNAMA