Good cyber security starts at home

The importance of data protection against cyber crime is illustrated once again in the report “Slack security measures led to leak of K Box customers’ data” (Oct 25).

Cyber security begins at home. Besides powerful software and infrastructure, as well as external systems and processes, the merits of good internal housekeeping should not be underestimated.

The K Box database leak, for which the Personal Data Protection Commission imposed a fine earlier this year, is a good example.

The grant application portals of some statutory boards — the Info-communications Media Development Authority, Spring Singapore and International Enterprise Singapore — come to mind.

Since these government grants involve the use of taxpayers’ money, such agencies must be especially vigilant about the possibility of unauthorised access to these portals by criminals and hackers.

A breach could potentially be achieved by stealing credentials belonging to ex-employees of firms eligible to apply for grants.

In this regard, good housekeeping and collaboration with firms and the Central Provident Fund Board on the disclosure of staff departures in those firms are important, effective deterrents.

An ombudsman system should also be implemented in government agencies.

This would allow the wider public to play a part and alert the authorities to suspected unauthorised access to government portals, or such attempts, along with other cyber crimes.