LTO raises cybersecurity concerns over expiring LTMS contract

TL;DR: The LTO is concerned about cybersecurity risks and system deficiencies in its LTMS, opposing a contract extension with Dermalog due to unresolved issues and audit findings.

The LTO cited unresolved cybersecurity issues and system deficiencies as reasons for opposing a contract extension with Dermalog.
The LTMS handles millions of driver and vehicle records and is part of the Department of Transportation's Road IT Infrastructure Project.
The Commission on Audit has flagged the system for delays, incomplete features, and operational deficiencies.
Four audit observations highlight limitations in the Motor Vehicle Inspection Report System and lack of integration with government systems.
The LTO requires change orders and additional funding to address system issues and maintain compliance with the Data Privacy Act.

The Land Transportation Office (LTO) has raised concerns over the future of its Land Transportation Management System (LTMS), citing unresolved cybersecurity issues and system deficiencies as the agency opposes a proposal to extend its contract with technology provider Dermalog.

During a recent House Committee on Transportation hearing, LTO Executive Director Martin Ontog said the agency has reservations about renewing Dermalog’s involvement in the LTMS, pointing to audit findings and unresolved issues that have persisted years after the system’s implementation.

According to the LTO, the deficiencies could expose millions of driver and vehicle records to potential security risks and may affect compliance with the Data Privacy Act.

Dermalog had earlier sought support for an additional PHP 2.5 billion budget for upgrades to the LTMS, saying the funding would be used for cybersecurity improvements, fraud detection capabilities, and anti-corruption measures. The company’s contract with the LTO expired on May 30.

The LTMS is part of the Department of Transportation’s Road IT Infrastructure Project and serves as the LTO’s primary digital platform for vehicle registration, licensing, and other transport-related transactions.

The Commission on Audit (COA) has previously flagged the system over delays, incomplete features, and operational deficiencies. The LTO said four separate audit observations documented issues affecting the platform’s functionality.

Among the reported concerns are limitations involving the Motor Vehicle Inspection Report System, lack of integration with certain government systems, and difficulties in updating vehicle ownership records.

The agency also said some transactions remain unsupported by the current system, including processes related to public utility vehicles, Motor Vehicle User’s Charge exemptions, and the automatic collection of penalties for newly registered vehicles.

Ontog noted that addressing many of these issues requires change orders and additional funding, creating what he described as a dependency on the technology provider for system modifications and enhancements.

The LTO added that unresolved turnover requirements, expired contractual obligations, and outstanding cybersecurity concerns remain key factors in its position against extending the current arrangement.

The LTMS is one of the government’s largest digital transformation projects, handling millions of records and transactions involving drivers, vehicles, and transport operators nationwide.