Comelec needs IT experts after alleged hacking —NAMFREL

The National Citizens' Movement for Free Elections (NAMFREL) on Thursday urged the Commission on Elections (Comelec) to conduct a thorough probe and consult with Information Technology (IT) experts in resolving the alleged hacking of data for May 2022 polls.

“NAMFREL recommends that Comelec consult with IT security experts in investigating and resolving the reported incident,” it said in a statement.

The election watchdog issued the call after a report said hackers breached the Comelec system on Saturday and downloaded usernames and personal identification numbers of vote-counting machines.

NAMFREL also advised the poll body to form an Incident Response Team (IRT) that will develop an incident response plan and address information security matters.

“NAMFREL recommends to the Comelec to set up an IRT, if it has not done so yet, whose primary responsibility includes developing a proactive incident response plan, conducting vulnerability assessment of the Comelec’s technology infrastructure including the AES (automated election system), resolving system vulnerabilities, implementing strong information security practices, and addressing information security incidents,” the organization said.

It added that the IRT must also develop quick response communications that will cover incidents including the alleged hacking.

Comelec spokesman James Jimenez said the authors of the report had been invited to shed light on their information, “particularly with regard to the ‘verification’ they claim to have carried out.”

Comelec has assured the public of its “full and scrupulous compliance with the Data Privacy Act, as well as its continuing cooperation with the National Privacy Commission (NPC).”

The NPC, which is looking into the incident, is expected to release its findings on January 21.

The Department of Information and Communications Technology (DICT) also said it will be conducting its own investigation into the alleged hacking.—LDF, GMA News