EDITORIAL - Preparing a counterattack

It’s good to know that attention is now focused on the serious threat posed by cyber attacks, on both government agencies and private enterprises.

The Armed Forces of the Philippines is reportedly putting together a Cyber Command that will be tasked specifically to battle state-sponsored cyber hackers and fraudsters. The AFP is currently recruiting cybersecurity professionals for the new command.

Digital experts have said most of the cyber attacks worldwide are being launched from just four countries: North Korea, Russia, China and Iran. Other states that have suffered from the attacks including the United States have set up extensive commands to counter the attacks.

Ambassador to the US Jose Manuel Romualdez has said that “almost all” Philippine institutions have become “severely compromised” and vulnerable to cyber attacks, including communications systems and public utility networks. The US is sending experts to assist in bolstering the country’s cyber defenses, Romualdez said.

While the objective is sound, recruiting experts for this task in the Philippines is certain to hit a snag: proper compensation for the skills required. The Department of Transportation and Communications has only 30 people in its cyber security team, and all of them are on job-order status, according to a DICT official. Why? Because the government can’t compete with the rates in the private sector for such skilled workers. The job-order arrangement is also a disincentive. People with these types of expertise want job security, not “endo” employment schemes.

In recent weeks, several government agencies have seen their websites hacked. The Medusa ransomware attack on the Philippine Health Insurance Corp., with the hackers demanding $300,000 in ransom, was reportedly launched by local hackers directed by foreign players. Initially downplayed by PhilHealth, we now know the attack is more serious than originally portrayed.

The hackers have yet to be caught. Since then, several other agencies have seen their websites  breached. As the government prepares its counterattack, policy makers should see to it that the considerable funding for the required expertise will not be found wanting.