LTO raises security concerns over LTMS control

TL;DR: The Land Transportation Office (LTO) has raised concerns over its ability to secure and maintain the Land Transportation Management System (LTMS), saying it still does not have access to the system’s source code.

The Land Transportation Office (LTO) has raised concerns over its ability to secure and maintain the Land Transportation Management System (LTMS), saying it still does not have access to the system…
LTO Executive Director Martin Ontog said the agency is currently unable to directly fix system slowdowns and outages, leaving it acting mainly as a user of the platform.
He added that without full technical access, the LTO cannot independently determine whether the system has vulnerabilities or has suffered a security breach.
The Cybercrime Investigation and Coordinating Center also warned that government agencies need sufficient control of their systems to properly check for security risks.
According to the LTO, it has sent 13 demand letters to German technology company Dermalog Identification Systems GmbH seeking the turnover of the source code.

The Land Transportation Office (LTO) has raised concerns over its ability to secure and maintain the Land Transportation Management System (LTMS), saying it still does not have access to the system’s source code.

LTO Executive Director Martin Ontog said the agency is currently unable to directly fix system slowdowns and outages, leaving it acting mainly as a user of the platform. He added that without full technical access, the LTO cannot independently determine whether the system has vulnerabilities or has suffered a security breach.

The issue has raised concerns because the LTMS handles services such as driver’s licenses, vehicle registrations, and other records used by millions of motorists. The Cybercrime Investigation and Coordinating Center also warned that government agencies need sufficient control of their systems to properly check for security risks.

According to the LTO, it has sent 13 demand letters to German technology company Dermalog Identification Systems GmbH seeking the turnover of the source code. The dispute includes payment claims that Dermalog says remain unresolved.

Dermalog, however, disputes the LTO’s claims. The company says the agency already possesses and exercises operational control over the LTMS database and denies refusing to turn over the source code, saying the process is subject to their contract.

No confirmed data breach has been announced. LTO said restoring stable services remains its immediate priority.

React to this article: