Steps to Safeguard Data Security on Device Management Application and Plans to Transition to Local Provider for Better Control

Mr Zhulkarnain Abdul Rahim asked the Minister for Education in relation to the recent incident of unauthorised access into a device management service provider's user management portal (a) what are the steps to be taken after investigations to ensure that such incidents do not recur again; and (b) whether the Ministry is able to take any steps on its own or together with governmental agencies such Cyber Security Agency, to increase the security of the Ministry's own device management application.

Ms Hazel Poa asked the Minister for Education (a) how many parents and staff respectively have had their data leaked in the data security breach incident concerning unauthorised access into the user management portal of Mobile Guardian; and (b) what are the steps being taken to raise the security level on such portals.

Mr Yip Hon Weng asked the Minister for Education following the data breach incident involving Mobile Guardian's app (a) whether the Ministry will consider transitioning to a local company with data centers and operations located in Singapore for greater control over user information; (b) whether the Ministry has determined if the data breach has been caused by a malicious cyberattack or by an access from unauthorised person(s); and (c) how will Mobile Guardian be made accountable.

Mr Chan Chun Sing: This question has been addressed by Parliamentary Question Nos 28 to 31, as published in the Circular for Written Answers on 7 May 2024. [Please refer to "Probe into Recent Mobile Guardian Data Breach Incident and Impact on Cybersecurity Measures for School Apps", Official Report, 7 May 2024, Vol 95, Issue 135, Written Answers to Questions for Oral Answer not Answered by End of Question Time section.]