FILE PHOTO: Passengers queue at Ninoy Aquino International Airport Terminal 3 in Pasay City as they wait to board their flights following the resumption of airport operations on Monday, Jan. 2, 2023. INQUIRER file photo / RICHARD A. REYES
MANILA, Philippines 鈥擳he Cybercrime Investigation and Coordinating Center (CICC) on Wednesday told the House of Representatives that, for now, no evidence suggests that a cyberattack caused the New Year鈥檚 Day flight disruption.
During the hearing of the House Committee on transportation, CICC head and Department of Information and Communications Technology (DICT) Undersecretary Alexander Ramos said that the issue that caused over 300 flights to be canceled, diverted, or delayed was off-grid, not something that could be controlled remotely.
Last January 1, flights in and out of the country were stopped after the Communications, Navigation, and Surveillance Systems for Air Traffic Management (CNS/ATM) by the Civil Aviation Authority of the Philippines (CAAP) malfunctioned.聽 The problem was traced to the current and standby uninterruptible power supply (UPS) failing to supply power to the system.
鈥淎s far as we鈥檙e concerned, on the power supply side, it鈥檚 an off-grid system, no remote access to that system so cyber attack has not been an issue as far as our investigation is concerned, yet,鈥� Ramos said.
鈥淪o that鈥檚 on the power line side,鈥� he added.
Committee chairperson and Antipolo 2nd District Rep. Romeo Acop, in response, asked Ramos what he meant by 鈥榶et鈥�.
鈥淵ou said 鈥榶et鈥�, ano ho bang ibig sabihin ng yet?聽 Ano pang titignan natin?鈥� he asked.
鈥淭he total, complete investigation on the CAAP system 鈥� malaki ho 鈥榶ong system nila eh 鈥� hindi pa ho kumpleto, we are addressing the most critical part, which is the one that is powering up the whole system.聽 鈥榊an ho ang aming directive to ensure continuity, to ensure quality, to ensure na hindi na gagalaw siya externally.聽 As far as the operation side, no, we haven鈥檛 even finished the assessment on it,鈥� Ramos replied.
Acop inquired further, asking if he is correct in assessing that CICC is not focusing on the possibility of a cyber attack, as what some Senators have feared.
READ: Senators seek thorough probe of Naia fiasco聽
Ramos said they could not immediately assess problems with the CAAP鈥檚 system because they do not have the tools to do so.聽 Such a problem, he said, could have been addressed if Congress had given them the funds to buy the tools.
鈥淚t is very important, especially that it鈥檚 your eyes to the sky, but since, kasi we have a problem also within our DICT [鈥 our budget was cut, actually not cut, rather the budget that was requested for was not given, we鈥檙e not even asking for an increase, our capability to do fast-tracking and forward-looking systems or tools, and the capability for us to look cannot be purchased,鈥� Ramos said.
鈥淲ell, we don鈥檛 have surveillance systems (to d0) cyber threat analysis [鈥 as far as the DICT family is concerned, where asking for the restoration of P400 million,鈥� he added.
Acop asked Ramos if they could even come up with an assessment without the said budget, to which the latter said they can, but it would take some time.
鈥淪o, in the absence of that budget, are you saying you cannot come up with a categorical answer if there was a cyberattack?鈥� Acop said.
鈥淚t can be said like this: we鈥檙e given sticks and stones to war, but we are not backing down, we鈥檙e doing it based on capability.聽 Give us the tools. We can ride on something faster,鈥� Ramos replied.
After outbound flights were grounded, it was initially believed that a power outage rendered the CNS/ATM non-operation.聽聽However, in a late night briefing on the same day, both Transportation Secretary Jaime Bautista and CAAP Director General (ret.) Capt. Manuel Tamayo clarified that a commercial power supply was available.
Instead, the UPS of the CNS/ATM鈥檚 main power source and the backup source went down.聽聽Tamayo said that they received a signal that the cooling blower of the UPS conked, which should have switched the power source to the backup 鈥� which did not happen.
The CAAP head said they tried to override the power supply by installing an automatic voltage regulator, but instead of getting the recommended 220 volts, the system operated on 380 volts 鈥� forcing a shutdown.聽聽The overvoltage, however left some damage on key components, like satellite dishes.
READ: UPS failure caused glitch at CAAP鈥檚 Air Traffic Management Center, says DOTr聽
READ: Air traffic聽system聽glitch diverts all flights in Manila聽/1711223/air-traffic-system-glitch-diverts-all-flights-in-manila
At least 350 flights have been delayed, canceled, or diverted to other regional airports and ports abroad.聽聽This translates to over 66,000 passengers supposed to leave through or arrive at the Ninoy Aquino International Airport (Naia), the country鈥檚 primary international gateway, and other main airports.