Up to 90,000 cyberattacks target MACC daily

KUALA LUMPUR: The Malaysian Anti-Corruption Commission (MACC) faces between 80,000 and 90,000 cyberattack attempts daily, underscoring the constant threat to sensitive information that could compromise investigations and endanger witnesses.

Behind its operations to uncover corruption, trace illicit funds and pursue those suspected of wrongdoing lies a vast amount of confidential information, including public complaints, investigative documents and classified records.

A single leak could alert investigation targets, expose witnesses to danger and jeopardise efforts to bring offenders to justice.

This makes information security more than a technological concern. It is a critical component of operational integrity and effective law enforcement.

At the centre of these efforts is the MACC's Records and Information Management Division, which is responsible for ensuring that information handled by the commission is managed systematically and protected against increasingly sophisticated threats.

Its director, Zuhairie Abu Bakar, said the daily volume of cyberattack attempts highlighted the high value of information held by the commission and its exposure to various threats.

He said information leaks could compromise the confidentiality of operations, threaten witness safety, alert investigation targets and undermine enforcement efforts.

"Information security is no longer merely a technical issue. It is part of the integrity safeguards of an enforcement agency.

"In an increasingly fast-paced world that depends on digital technology, information leaked at the wrong time or to the wrong people can have serious consequences for investigations, individual safety and national interests," he told Harian Metro.

Zuhairie said information handled by the MACC was not merely data to be stored, as every complaint, document and record carried its own value and level of confidentiality.

These records must be managed, protected and processed in accordance with established procedures, he said.

He added that the challenges surrounding information management were becoming increasingly significant, requiring security technologies to be continuously strengthened to address future threats.

The division oversees information management from the receipt of initial public complaints to the handling of documents and records carrying specific security classifications.

Zuhairie said threats in the digital era extended beyond physical attempts to access confidential records, encompassing cyberattacks, unauthorised access, data theft and other forms of digital intrusion.

To counter these threats, the division employs a layered security approach to protect the commission's databases and information systems.

Measures include multi-factor authentication (MFA), network security systems such as firewalls, real-time system monitoring, data encryption and regular security testing of applications.

Systems are also tested before being approved for use, ensuring potential vulnerabilities can be identified and addressed before deployment.

"Ultimately, fighting corruption is not just about arrests, investigations or prosecutions. Behind every enforcement action is a network of information management processes that must be carried out with the utmost care," he said.