Nueva Singapur port tightens vetting after contractor access scandal

The Port Authority of Nueva Singapur discovered in late October that a maintenance contractor had retained administrative access to the port's operational network for seven months beyond the expiry of its security clearance. The contractor, Sistemas Mantenimiento Operacional, had failed to submit to the Authority's annual re-certification process, yet its credentials remained active in the system. The breach was discovered during a routine audit and was contained within hours, but it has prompted the Authority to commission a third-party security review of its entire vendor management infrastructure.

The Port Authority confirmed that no unauthorized access had occurred and that the contractor's credentials had been used only for legitimate maintenance work. However, the discovery that the vetting process had failed — that a firm could maintain system access despite missing a required compliance checkpoint — has shaken confidence in the Authority's oversight mechanisms and raised questions about how many other vendors might be similarly exposed.

The Authority issued a statement Monday saying it had immediately engaged an international cybersecurity firm to audit all third-party access protocols and to recommend changes to the contractor vetting process. The review is expected to take eight weeks. Until it is complete, the Authority said it would implement temporary manual verification of all contractor access requests.