The Communications and Multimedia Commission (MCMC) today gave its assurance that all services rendered by the certification authorities under its regulation – including the Companies Commission (CCM) – are trustworthy.
The MCMC was responding to sources telling Malaysiakini on Thursday that certified true copies of documents issued by the CCM may be of questionable authenticity.
In a statement, the commission pointed out that all licensed certification authorities are subject to annual audits.
"The services rendered by certification authorities, which are regulated by MCMC under the Digital Signature Act, are under a trustworthy system, and as at the fourth quarter of 2018, 12.4 million certificates have been issued by the four licensed certification authorities.
"All licensed CA in Malaysia must undergo mandatory annual performance audit, carried out by qualified auditors who have expertise in digital signature technology, standards and practices, to ensure the trustworthiness of the licensed certification authority's system," it said.
The MCMC also pointed out that this auditing process is based on the WebTrust International Standard used by the majority of licensed certification authorities around the world.
"Moreover, subscribers to the service are protected by suitable guarantees provided by the certification authority as required under the Digital Signature Act 1997," it added.
MCMC said any queries regarding digital signature services provided by the licensed authorities can be forwarded to the commission.
MACC investigators probing alleged corruption and abuse of power in an RM500 million CCM project were said to have found that its certified true copies do not comply with the Digital Signature Act.
Sources said that as a result, these documents could be considered tampered evidence in courts of law.
The CCM denied the report yesterday, saying that its certified true copy system had been properly developed and was in compliance with the law.
"CCM affirms that the copies of documents being used by the public are legally valid and there is no basis to doubt their authenticity," it said in a statement.
