By leveraging advanced technologies, governments can identify potential risks and ensure that those entrusted with sensitive information and responsibilities uphold the highest standards of integrity and security.
PUTRAJAYA: In today’s hyperconnected world, safeguarding national security has become more complex and critical than ever, as security threats loom around every corner.
As technology advances in the digital age, so do the threats that nations face, ranging from cyberattacks and data breaches to espionage and misinformation campaigns.
These digital threats have the potential to compromise national infrastructures, disrupt economic stability and endanger the safety and privacy of citizens.
In response, national protective security initiatives must evolve rapidly to address these challenges by employing advanced technologies and enhancing cybersecurity measures.
“Our duty at CGSO is to oversee and protect government departments and numerous critical industries from security threats such as espionage, sabotage, cyber threats and subversive threats,” says Chief Government Security Office director-general Datuk Rahimi Ismail. — AZLINA ABDULLAH/The Star
This extends beyond protecting borders and infrastructures, as it includes the very people who serve within the public sector and critical national infrastructure sector.
By leveraging advanced technologies, governments can identify potential risks and ensure that those entrusted with sensitive information and responsibilities uphold the highest standards of integrity and security.
This is why the Chief Government Security Office (CGSO), under the Prime Minister’s Department, is implementing the e-Protective Security system to automate and streamline the core business process, alongside the revamped e-Vetting 3.0 system to bolster security personnel screening efforts.
e-Protective Security
CGSO director-general Datuk Rahimi Ismail says that the digitalisation of the protective security management system, via e-Protective Security, is to establish a centralised repository for security information, enhancing the systematic and streamlined approach to protective security measures.
“We are implementing this system to transition from a laborious manual approach to a more digital concept.
“This shift aims to provide swift and efficient service delivery by eliminating disruptions caused by manual bureaucracy.
“This will ensure external users or government departments receive services quickly with this new form of ‘instant service’,” he says.
The e-Protective Security system will encompass numerous functions such as protective security and compliance management, ICT security and classified information management and holistic training administration.
He hopes that the government agencies will adapt with the e-Protective Security system towards a more sustainable form of “self-protective security”.
He explains that government personnel can also apply for protective security courses and training at the Malaysian Protective Security Training Institute (ILKEM) via the e-Protective Security app.
“Previously, applying for training courses at ILKEM was conducted manually.
“This meant that many government personnel were not always made aware of the availability of training modules at the institute. Now, with everything done online or digitally, they can easily access and apply for training in the palm of their hands.
“This way, we can better assess and overcome any shortcomings, in a faster and easier way.”
e-Vetting 3.0
Rahimi says that effective security screening of personnel, in both public and private sectors, is essential to protect sensitive information and national secrets, as well as maintain public confidence.
“Our duty at CGSO is to oversee and protect all aspects related to government security.
“The three main points of interest under our scope are to protect government departments and numerous critical industries, as well as to conduct personnel security background checks from security threats such as espionage, sabotage, cyber threats and subversive threats,” he says.
He adds that CGSO also serves multiple other functions, such as acting as policymakers for matters related to protective security management, addressing any sabotage threats that could affect government functions and national interests, raising awareness and fostering a culture of protective security and managing personnel security policies for public officials and related private entities.
Rahimi says that the e-Vetting 3.0 system, which is set to replace e-Vetting 2.0 in March next year, will also transition to a fully digital mode.
The new system represents an online or digital mode of security screening to counter subversive activities, espionage, sabotage and terrorism, from within or outside the country.
“The old system (e-Vetting 2.0) was operating at a semi-manual level, with data integration from only four government service bodies.
“With e-Vetting 3.0, almost everything can be done digitally and we now have data integration with additional government service bodies,” he says.
It will be integrated with 10 government data services to check the validity of information on Malaysian citizens or non-Malaysians, individual records who have been in prison related to crime and security intelligence, public service data, corruption, bankruptcy and court information for individuals who have been convicted.
The enhanced data integration allows the systems to identify weaknesses in the personal character of personnel that may lead them to be involved in the disclosure of official classified information.
Rahimi says that this revamped system will be particularly useful for government departments to screen or vet potential employees. This is mainly done through two modes, namely basic security screening and detailed security screening.
“Being able to perform most of these processes online with the new system makes it possible for us to reduce the duration to issue vetting results.”
Rahimi adds that the integration with respective government service bodies is also crucial in ensuring the accuracy and reliability of data, to prevent potentially dangerous personnel from “slipping through the cracks”.
“We have expanded the scope of data integration to ensure that all protective security aspects are covered, including security, finance and immigration. When we have the ability to cross-reference data and information, we can reduce the risks for various departments by providing timely security screening results, and lower the occurrences of unwanted or dangerous personnel,” shares Rahimi.
Rahimi shares that both e-Protective Security and e-Vetting 3.0 were developed based on the CIAAN security characteristics, which refer to Confidentiality, Integrity, Availability, Authenticity and Non-Repudiation.
The transition to a digital mode of service delivery will also help to reduce costs and resources.
“We have to ensure the accuracy, reliability and authenticity of data to not only protect confidential information and secrets but to also improve trust and confidence in the system.
“If the public is not confident in the system, it will not succeed and the government’s investment will be wasted. That is why we make sure that the e-Protective Security system is made to a standard that guarantees safety and reliability.”
Additionally, both systems will employ various cybersecurity measures including database encryption, security marking, watermarking security and the use of symmetric and asymmetric encryption key management.
He explains that both the e-Protective Security and e-Vetting 3.0 systems represent CGSO’s initiative in supporting the government’s efforts to digitalise the nation.
“With methods like this, we are moving towards a more digital future, transitioning from manual to digital systems.
“We aim to provide a service delivery that is top notch and strive to produce a new system that can address issues faced by public servants and private sector employees.”
For more information, visit www.cgso.gov.my
