Local Mobile App Still Needs Rigorous Security Audits: Experts

Cybersecurity expert Fong Choong Fook has stressed the importance of regular security audits for TuJu, the mobile application used to track civil servants' locations and movements, even though it was developed domestically.

Fong cautioned that periodic security reviews are essential to prevent sensitive location data and movement patterns of government employees from being compromised or accessed by unauthorised third parties. The safeguards are particularly critical given the confidential nature of information that could be derived from tracking officials' whereabouts.

The warnings highlight growing concerns among security professionals about protecting government infrastructure and employee privacy in Malaysia. While locally-developed applications may offer certain advantages in terms of data sovereignty, experts maintain that security standards cannot be compromised regardless of where software is created.

Fong's comments underscore the need for Malaysian government agencies to implement comprehensive security protocols, including routine vulnerability assessments and penetration testing, to maintain the integrity of systems handling sensitive personnel information. The recommendations reflect international best practices for protecting government digital assets and personal data.