COI Report – Part IV
Page 176 of 425
to login to the SCM database from the Citrix servers, and some of the accounts that had been used, including the AA. account. This was the first time Clarence had heard of these matters. The meeting lasted for around 1.5 hours.
557. At around 7:00 to pm on 9 July 2018, Clarence called Serena and informed her that there were SQL queries being run on the SCM database, that the source of these queries could not be identified, and that there were attempts to access the SCM database. Serena understood this to be a serious issue, and asked for an urgent meeting to be convened at ConnectionOne. Lyonel Cha Director System Management, IHiS Infrastructure Services Division) and Han
Hann Kwang (Head of the SMD), who happened to be with Serena at IHiS’ offices at Serangoon North at the time of the call, followed her to ConnectionOne. Arrangements were made for relevant staff from the Infrastructure Services Division to attend the meeting as well.
28.4 Meeting at ConnectionOne and the decision to escalate the
matter to Benedict Tan
558. Serena led the urgent meeting at ConnectionOne on the night of 9 July
2018. Attendees included Woon Lan, Han, Ernest, Wee, Lum, Clarence, Henry, Katherine, Teresa and Loh Khim Huat. The attendees began with piecing together information about incidents on 4 July 2018, and then worked backwards and started adding in information about incidents in June 2018.
559. The attendees of the meeting also attempted to interpret each of the SQL queries made to the SCM database. It appears that prior to the meeting, Kelvin informed Henry in a phone call that the query discovered on 4 July 2018 had returned zero results from the SCM database. Henry then informed Clarence of the same over a separate phone call, and subsequently informed all the attendees of the meeting as well. The evidence suggests that at the time of the meeting, no
|
