Dígitro Tecnología SA, the manufacturing company of The Guardian of the Ministry of the Interior, learned through the media and social networks that Alejandro Astesiano, former custodian of President Luis Lacalle Pou, offered the wiretapping system of the Ministry of the Interior, which must be accessed only with judicial authorization. In response, the company sent a letter to the ministry and made clarifications.
According to the document you accessed The Observercontents and metadata are named using codes, which – according to the company – makes it impossible to find out which content belongs to which police operation. Regarding an evidence custody, the system keeps the content and metadata in their original state.
According to the company, The Guardian has “robust mechanisms” against failures and against “improper access”. “The databases are not accessible to users or to personnel in the area of Information and Communication Technology (ICT) of the Ministry of the Interior. It’s like a system hermetic (closed)“, Add.
The information security policy is prepared and executed by the Ministry of the Interior, and it is the task of the system manufacturer to respect and comply with it, as both agreed.
The system is hermetic, says the company, adding that it is accessed through a local network or the intranet of the Ministry of the Interior. Access to the system and the network are managed by the ICT area team. The system does not make the content and metadata available to users. When a report is complete, it is exported automatically. encrypted so that only a judge can open the results. That way, the content never leaves the system, he says.
Authorized Officials Only and trained can access the system. These accesses are controlled and recorded, he points out.
In case copies are made, they are encrypted and automated. They are kept under the responsibility of the ICT area of the Ministry of the Interior, using security protocols, as arranged. Also, only the ICT team has access to the place where the backups are kept.
Copies are made periodically, automatically, in accordance with the information security policy. In addition, El Guardian “constantly monitors” the integrity of the stored content. He also automatically manages that data. Maintenance is done by the ICT team, the company says.
Dígitro indicates that the system is not intrusive; receives metadata and content from providers, be they telephone operators or data providers, only by court order. This is done automatically. In the Ministry of the Interior, this judicial order remains in two systems: SAIL and Guardian.
The contents and metadata analyzed remain encrypted in database engines. All operations, including simple queries, are logged and available for robust auditing.
The manufacturer is the same for “all systems in Brazil and South America”affirms Dígitro, whose letter is signed by the director of Market Relations, Octávio Carradore.
The Guardian cost approximately $2 million and an annual maintenance and technical service of almost US$200 thousand by the supplier company.
