Steps to Safeguard Data Security on Device Management Application and Plans to Transition to Local Provider for Better Control
Ministry of EducationSpeakers
Summary
This question concerns the data security breach involving Mobile Guardian, where Mr Zhulkarnain Abdul Rahim, Ms Hazel Poa, and Mr Yip Hon Weng inquired about preventive measures, the extent of the data leak, and the potential for transitioning to local providers for better control. The Members of Parliament also questioned the accountability of the provider and how the Ministry would collaborate with the Cyber Security Agency to enhance security. Minister for Education Chan Chun Sing responded that these inquiries were covered in an earlier parliamentary answer from May 2024. That session detailed the probe into the incident and its subsequent impact on cybersecurity protocols for various educational applications.
Transcript
19 Mr Zhulkarnain Abdul Rahim asked the Minister for Education in relation to the recent incident of unauthorised access into a device management service provider's user management portal (a) what are the steps to be taken after investigations to ensure that such incidents do not recur again; and (b) whether the Ministry is able to take any steps on its own or together with governmental agencies such Cyber Security Agency, to increase the security of the Ministry's own device management application.
20 Ms Hazel Poa asked the Minister for Education (a) how many parents and staff respectively have had their data leaked in the data security breach incident concerning unauthorised access into the user management portal of Mobile Guardian; and (b) what are the steps being taken to raise the security level on such portals.
21 Mr Yip Hon Weng asked the Minister for Education following the data breach incident involving Mobile Guardian's app (a) whether the Ministry will consider transitioning to a local company with data centers and operations located in Singapore for greater control over user information; (b) whether the Ministry has determined if the data breach has been caused by a malicious cyberattack or by an access from unauthorised person(s); and (c) how will Mobile Guardian be made accountable.
Mr Chan Chun Sing: This question has been addressed by the answer to Parliamentary Question Nos 28 to 31 for the Parliamentary Sitting on 7 May 2024. [Please refer to "Probe into Recent Mobile Guardian Data Breach Incident and Impact on Cybersecurity Measures for School Apps", Official Report, 7 May 2024, Vol 95, Issue 135, Written Answers to Questions for Oral Answer not Answered by End of Question Time section.]