KUALA LUMPUR: CyberSecurity Malaysia and the Malaysian Communications and Multimedia Commission (MCMC) have the capacity to evaluate information communication technology systems and products to safeguard national security and sovereignty from threats of espionage, the Dewan Rakyat was told yesterday.

Communications and Multimedia Minister Gobind Singh Deo said the evaluations are based on international standards, ranging from ISO/IEC 15408 Common Criteria (CC) to Evaluation Assessment Level 4 (EAL4) certification.

“At this stage, the source code is assessed by the laboratory to ensure compliance with the developed protection profile,” he said during oral question time in the house.

He was replying to a question from Hassan Abdul Karim (PH-Pasir Gudang) who wanted the minister to state what assurance there is that Malaysia’s sovereignty is secured from the threat of espionage when the country chooses to remain committed to using the technology of Huawei of China.

Gobind said Huawei products such as IP cameras, firewalls, network switches, routers and software have been evaluated and certified by international standards including ISO/IEC 15408 CC.

He added that CyberSecurity can also handle vulnerability assessment and penetration tests on 5G devices and drones to ensure cybersecurity.

“The government has developed the National Cryptography Policy for information security through the implementation of credible cryptographic infrastructure.

“This can overcome the problem of information leakage in cyberspace and the authenticity of information,” he said.

Gobind added that CyberSecurity is developing a credible cryptographic algorithm portfolio named the National Trusted Cryptographic Algorithm List or MySEAL. – Bernama