Reroute IC renewal demand JPN Putrajaya → MyEG/kiosks

Auto-generated from CDPA, CWFA agents based on the prior 24-hour signal window.


Consolidate 4 Pejabat Tanah counters into 1 hub

Auto-generated from SPPA, AFRA agents based on the prior 24-hour signal window.


Pre-schedule 11 generator services ahead of Aidilfitri

Auto-generated from AFRA agents based on the prior 24-hour signal window.


Escalate: PDPA breach risk on legacy citizen-data system

Auto-generated from CDPA agents based on the prior 24-hour signal window.


Reroute IC renewal demand from JPN Putrajaya to MyEG / kiosks (240→80 min queues)

Aidilfitri long weekend is 4 days away; JPN Putrajaya IC-renewal counter peak forecast 380/hr Mon vs capacity 92/hr → 240-min wait. MyEG and kiosk channels under-utilised. Channel-shift saves staff time, lifts NPS, and avoids Auditor-General service-level observation.

Queue surge building at JPN Putrajaya IC-renewal counter ahead of Aidilfitri week

Mon-Wed forecast at JPN Putrajaya shows IC-renewal demand climbing toward 240-min waits as the long-weekend pre-Aidilfitri rush begins; MyEG IC-renewal slots and kiosk capacity at Alamanda and IOI City Mall are 47% under-utilised. Citizen NPS already slipping 62→41 across the seven-day window.

JPN Putrajaya IC-renewal counter: forecast 215-min wait Mon 25-May (capacity 92/hr vs arrivals 380/hr)

Citizen NPS slip: 62 → 41 across the 7-day window

MyEG IC-renewal kiosk utilisation Alamanda 53%, IOI City 47% (vs 88% target threshold)

MAMPU GDX citizen-data exchange logs show 18,400 booked appointments Mon-Wed

Public-complaint volume on X/Threads up 3.2x WoW for #JPN tag

Push SMS+MyGovernment app nudge to 18,400 citizens with appointments Mon-Wed offering MyEG/kiosk slots

Open 6 additional MyEG IC-renewal slots/hour at Alamanda and IOI City kiosks from 09:00-17:00

Probability ~62% that, without active rerouting, Mon 26-May wait times breach the 180-min Auditor-General service threshold and trigger a Star/Berita Harian story cycle. Reputational downside larger than RM staff-cost loss; pre-emptive nudge campaign is low-regret.

jpn-putrajaya-wait-min citizen-nps-7d myeg-kiosk-util mampu-gdx-bookings social-complaint-volume

Re-roster 14 JPN counter staff in anticipation of channel shift

If demand reroutes as modelled, JPN Putrajaya needs 14 fewer counter FTE Mon-Wed and 6 more kiosk-floor concierges. JPA scheme C19 rotation rules permit lateral redeployment within ministry; OT bank healthy.

JPN Putrajaya: 14 counter FTE projected surplus Mon-Wed under channel-shift scenario

JPA HRMIS shows OT bank at 72% utilised — RM 47k headroom available before scheme cap

CUEPACS branch lead briefed previously on Aidilfitri surge framing

Kiosk concierge demand: +6 FTE Sun-Mon at Alamanda + IOI City clusters

JPN Cyberjaya office under-utilised at 41% counter load Mon-Wed

Issue redeployment memo via JPA HRMIS by 22-May 17:00; brief CUEPACS rep same day

Run 2-hour kiosk-concierge refresher for 6 redeployed officers on 23-May AM

Probability ~25% that union (CUEPACS) flags the redeployment if framed as cost-cutting; framing as citizen-service uplift mitigates. JPA scheme compliance reviewed — no breach.

jpn-counter-fte-load jpa-hrmis-ot-bank cuepacs-grievance-risk kiosk-concierge-demand jpn-cyberjaya-load

JPN Putrajaya IC-renewal wait time (min, Mon peak)

Auditor-General service-level threshold 180 min; approaching threshold by day 7


Consolidate 4 underperforming Pejabat Tanah counters into 1 hub at PTG Shah Alam

+RM 6.4M annualised (opex RM 1.6M + property-yield RM 4.8M)

Four PTG counters (Hulu Selangor, Kuala Selangor, Sabak Bernam, Sepang) at sustained <20% utilisation as e-Tanah portal absorbs demand. Hub-and-spoke model at PTG Shah Alam covers all four catchments within 45-min drive. Citizen-service KPIs maintained; annualised savings RM 6.4M.

Four PTG counters at sustained <25% utilisation; consolidation business case crossing payback threshold

PTG Hulu Selangor, PTG Kuala Selangor, PTG Sabak Bernam and PTG Sepang counter-utilisation has averaged 18.3% over the past 90 days. Citizen demand has largely shifted to ePerolehan land-search and e-Tanah portal. Hub-and-spoke model at PTG Shah Alam absorbs 100% of physical demand within 45-min drive isochrone.

PTG 4-site counter utilisation 90-day avg: 22% → 15% (target threshold 60%)

e-Tanah portal absorbs 78% of land-search transactions YTD (vs 41% in 2024)

Drive-isochrone study: 100% of physical demand within 45-min of PTG Shah Alam

Annual saving RM 6.4M: opex RM 1.6M + Sepang lot property-yield RM 4.8M

PTG Sepang lease termination clause Dec-2026 — natural exit window

Hold consolidation announcement until 5-Jun board cycle; complete drive-isochrone study by 30-May

Pre-brief State EXCO member for land matters confidentially on 28-May

Probability ~40% of MB Selangor political pushback if announced pre-Aidilfitri; recommend deferring communication to post-2-Jun. PDPA implications nil — no citizen data leaves state. Akta Rahsia Rasmi land-title custody plan reviewed.

ptg-4site-counter-util etanah-portal-absorption ptg-drive-isochrone sepang-lease-termination exco-stakeholder-temp

Facility footprint freed: 2,840 sqm across 4 sites; lease exits achievable in 9 months

Three of the four PTG counters are state-owned (zero lease cost) but carry RM 132k/month opex (security, utilities, ICT). PTG Sepang is leased to Dec-2026 — natural exit. Hub-site PTG Shah Alam has 380 sqm spare capacity on Level 3.

Combined 4-site opex: RM 135k/month (security, utilities, ICT)

PTG Shah Alam Level 3: 380 sqm spare; fit-out costed at RM 1.1M

PTG Sepang lease-exit notice deadline 30-Jun to hit Dec-2026 termination

MAMPU Panel Contract PC-2025-12 covers IT-asset transfer logistics

Land-title cabinet relocation plan (Akta Rahsia Rasmi) reviewed by Pengarah Tanah

Commission facility audit at PTG Shah Alam Level 3 by 29-May

Issue ePerolehan tender ref MOF/T-2026-041 for IT-asset transfer logistics

Probability ~20% that MAMPU IT-asset transfer extends past 90-day Audit-General compliance window; Akta Rahsia Rasmi requires land-title cabinet relocation with 2-officer chain of custody.

PTG 4-site counter utilisation (%, 7-day rolling avg)

Counter-utilisation floor 60%; sustained breach for 90+ days triggers Network review under MAMPU service-point policy


Pre-schedule 11 generator services ahead of Aidilfitri long weekend

Aidilfitri 4-day shutdown (28-31 May) eliminates contractor mobilisation. 11 critical gensets across EPF, JPN, PTG service points must be pre-serviced. Single failure during a grid trip would impair post-holiday citizen transactions; avoided-disruption value RM 720k.

11 critical generators need pre-Aidilfitri service; only 3 currently certified

EPF, JPN and PTG service points across Klang Valley rely on 11 standby generators sized 250-800 kVA. Annual service certificates expire 1-Aug-2026 but pre-emptive service now avoids any service interruption during the 4-day Aidilfitri shutdown window (28-31 May) when no contractor will mobilise.

11 critical gensets across 9 service points (EPF, JPN, PTG); sizes 250-800 kVA

Aidilfitri long weekend 28-31 May: no contractor mobilisation available

Historical Klang Valley grid-trip base-rate 58% over a 4-day window

Avoided-disruption value RM 720k (14,000 EPF transactions Mon-Tue post-holiday)

ePerolehan call-off MOF/T-2026-042 against MAMPU panel vendor Kemaman Power

Issue ePerolehan emergency call-off MOF/T-2026-042 to MAMPU-panel genset vendor by 23-May 12:00

Sequence 11 service slots across 24-25 May (Sat-Sun) to leverage off-peak service-point operations

Probability ~58% of at least one ST grid trip during Aidilfitri long weekend (historical base-rate Klang Valley 4-day window). One generator failure at EPF Petaling Jaya during a grid trip = service downtime for 14,000 EPF transactions Mon-Tue post-holiday; RM 720k avoided-disruption value.

genset-service-status epf-jpn-ptg-criticality klang-grid-trip-baserate aidilfitri-window-coverage mampu-emergency-mobile-pool

Generators serviced & certified (count of 11)

Target: all 11 certified by 26-May 18:00 (T-48h to Aidilfitri shutdown 28-31 May)


Shift MAMPU data-centre Cyberjaya batch IT load off ST ToU peak (14:00–22:00 weekdays)

38% of Cyberjaya MAMPU-PDSA data-centre peak load is batch/reporting (JPA payroll, EPF dividend, Audit compile) that can shift to 22:00-06:00 off-peak. Saving RM 192k/month under ST ToU C2; no citizen-facing impact. MAMPU IT guidelines support off-peak scheduling.

MAMPU data-centre Cyberjaya tracking RM 192k/month ST peak premium; batch-shift opportunity

Cyberjaya MAMPU-PDSA data-centre averaging 422 kW during ST ToU peak (14:00-22:00 weekdays). Roughly 38% of that load is batch/reporting workloads (JPA payroll runs, EPF dividend calculations, Audit-General report compilation) that can shift to overnight 22:00-08:00 off-peak window with no citizen-facing impact.

MAMPU-PDSA Cyberjaya 7-day avg ST peak load: 428 kW (vs off-peak avg 218 kW)

Batch/reporting workloads (JPA, EPF, Audit) = 38% of peak-window load

ST ToU C2 tariff: peak premium RM 0.46/kWh vs off-peak RM 0.21/kWh

MAMPU change-control ticket CR-2026-0418 drafted; PDPA review clean

Three-ministry sign-off (Treasury, MOHE, MOH) required under MAMPU IT guidelines

Reschedule JPA payroll, EPF dividend, Audit compile batch windows to 22:00-06:00 from 26-May

Update MAMPU change-control ticket CR-2026-0418 and notify ministry CIOs

Probability ~12% of overnight batch overrun affecting next-morning citizen transactions; mitigation is hard 06:00 cut-off + roll-back protocol. PDPA implications nil — workloads internal. MAMPU IT guidelines support off-peak scheduling.

mampu-pdsa-peak-kw batch-workload-share st-tou-tariff-c2 mampu-cr-status ministry-cio-signoff

MAMPU-PDSA Cyberjaya ST peak load (kW, 7-day rolling)

Internal target: hold peak load ≤350 kW post-shift; current trajectory 430+ kW without action


Escalate: PDPA breach risk on legacy SISTANIS citizen-data system

-RM 8M potential PDPA penalty (plus Akta Rahsia Rasmi liability)

Legacy SISTANIS system (2012-vintage, 6.2M citizen records) showing accelerating anomalous bulk-query patterns. PDPA Section 130 imposes 72-hour disclosure clock from breach confirmation. Penalty exposure RM 4-8M; Akta Rahsia Rasmi liability for officers/contractors involved. Reputation precedent (2023 immigration breach) cost RM 3.2M and 14 months of remediation.

Anomalous query patterns on legacy SISTANIS citizen-data system; PDPA 72-hour clock not yet triggered

SISTANIS (legacy 2012-vintage citizen-records system, ~6.2M records) showing 22 anomalous bulk-query events over the past 7 days, up from baseline 4/day. Source IPs concentrated in two MAMPU-managed ranges. No confirmed exfiltration yet — but PDPA Section 130 requires disclosure to JPDP within 72 hours of breach confirmation.

SISTANIS anomalous bulk-query events: baseline 4/day → 22/day over 7-day window

Source IPs concentrated in 2 MAMPU-managed ranges (contractor service account suspected)

Scope of potential exposure: name, IC, address (no biometric, no MyKad PIN) for ~84,000 records (preliminary)

CSM (CyberSecurity Malaysia) engaged under MAMPU IRT-2026-007 standing arrangement

PDPA Section 130: 72-hour JPDP disclosure clock from formal breach confirmation

Isolate SISTANIS read-API from MAMPU GDX exchange pending forensic review; 4-hour outage window planned

Engage CyberSecurity Malaysia (CSM) incident response team under MAMPU IRT-2026-007 standing arrangement

Probability ~35% that forensic analysis confirms unauthorised access in next 5 days; if confirmed, PDPA penalty exposure up to RM 8M plus potential criminal liability under Akta Rahsia Rasmi for officers involved. Reputation risk: prior breach (2023 immigration) cost ministry RM 3.2M and 14 months of remediation.

sistanis-anomaly-rate mampu-source-ip-concentration contractor-svc-account-status csm-irt-engagement pdpa-72h-clock

SISTANIS daily anomalous bulk-query events

Internal alerting threshold 10/day; breach baseline crossed on day 3 of window — forensic engagement triggered


JPN Putrajaya IC-renewal waits approach 4-hour ceiling; reroute campaign needs T+24h decision

Yesterday's nudge campaign reached 11,200 citizens; 38% conversion to MyEG/kiosk — solid but below the 55% target needed to keep Mon-Tue waits under 120 min. Forecast Mon peak: 380/hr arrivals vs 92/hr counter capacity → 240-min wait without further action.

JPN Putrajaya IC-renewal counter: forecast 228-min wait Mon 25-May (capacity 92/hr vs arrivals 380/hr)

Citizen NPS slip: 60 → 39 across the 7-day window

MyEG IC-renewal kiosk utilisation Alamanda 53%, IOI City 47% (vs 88% target threshold)

MAMPU GDX citizen-data exchange logs show 18,400 booked appointments Mon-Wed

Public-complaint volume on X/Threads up 3.2x WoW for #JPN tag

Approve RM 5 MyEG IC-renewal fee waiver for Mon-Wed bookings (cost ~RM 92k, funded from CWA contingency)

Second SMS wave to 28,000 remaining appointment-holders by 23-May 20:00

Probability ~74% that waits exceed 200 min on Mon 25-May without an aggressive second-wave SMS and a MyEG fee-waiver. Public complaint volume on X/Threads already up 3.2x week-on-week.

Counter-to-kiosk staff shift confirmed; concierge gap widening

14 counter staff redeployed yesterday performing well; however kiosk volume jumping faster than modelled — need 4 more floor-concierges at Alamanda Sun-Mon. Overtime budget RM 11k.

JPN Putrajaya: 14 counter FTE projected surplus Mon-Wed under channel-shift scenario

JPA HRMIS shows OT bank at 72% utilised — RM 47k headroom available before scheme cap

CUEPACS branch lead briefed previously on Aidilfitri surge framing

Kiosk concierge demand: +6 FTE Sun-Mon at Alamanda + IOI City clusters

JPN Cyberjaya office under-utilised at 41% counter load Mon-Wed

Authorise 4 additional concierge OT shifts Sun-Mon at Alamanda kiosk cluster

Stand up live kiosk-queue dashboard for Director-General by 24-May 08:00

Probability ~30% that without additional concierges, kiosk abandonment rate climbs above the 18% internal threshold. JPA OT cap not breached.

Auditor-General service-level threshold 180 min; crossed on day 6 of window


PTG consolidation case strengthened; decision needs Director-General approval this week

Utilisation has continued to slide to 14% as more land transactions move to e-Tanah. Annual savings now firm at RM 6.4M (opex RM 1.6M + property-yield RM 4.8M from converting Sepang lot to commercial use). State EXCO pre-brief positive.

PTG 4-site counter utilisation 90-day avg: 21% → 14% (target threshold 60%)

e-Tanah portal absorbs 78% of land-search transactions YTD (vs 41% in 2024)

Drive-isochrone study: 100% of physical demand within 45-min of PTG Shah Alam

Annual saving RM 6.4M: opex RM 1.6M + Sepang lot property-yield RM 4.8M

PTG Sepang lease termination clause Dec-2026 — natural exit window

Escalate to DG for board-paper drafting; target 5-Jun board cycle approval

Schedule joint MB-DG town-hall in Shah Alam by 12-Jun

Probability ~55% that MB Selangor requires a formal town-hall before announcement; this adds 3 weeks but does not jeopardise business case. Audit-General likely to flag delay if deferred past Q3.

Facility transition plan locked; PTG Shah Alam Level 3 retrofit costed at RM 1.1M

Audit confirms PTG Shah Alam Level 3 can absorb 4-site workload after RM 1.1M fit-out (counter modules, biometric capture, JPN-grade ICT). Lease-exit notice for PTG Sepang must be served by 30-Jun to hit Dec-2026 termination clause.

Combined 4-site opex: RM 136k/month (security, utilities, ICT)

PTG Shah Alam Level 3: 380 sqm spare; fit-out costed at RM 1.1M

PTG Sepang lease-exit notice deadline 30-Jun to hit Dec-2026 termination

MAMPU Panel Contract PC-2025-12 covers IT-asset transfer logistics

Land-title cabinet relocation plan (Akta Rahsia Rasmi) reviewed by Pengarah Tanah

Award ePerolehan tender MOF/T-2026-041 to MAMPU-panel vendor by 6-Jun

Serve PTG Sepang lease-exit notice to landlord by 28-Jun

Probability ~25% that ePerolehan tender for IT-asset transfer slips past 90-day Audit-General window. Mitigation: pre-position via MAMPU Panel Contract PC-2025-12.


8 of 11 generators serviced; 3 remaining must complete by 26-May 18:00

Service campaign 73% complete. Three remaining gensets at EPF Petaling Jaya (800 kVA), JPN Shah Alam (500 kVA) and PTG Klang (400 kVA) need final service Tue 26-May. Vendor (Kemaman Power) confirmed availability; ePerolehan PO MOF/T-2026-042 active.

11 critical gensets across 9 service points (EPF, JPN, PTG); sizes 250-800 kVA

Aidilfitri long weekend 28-31 May: no contractor mobilisation available

Historical Klang Valley grid-trip base-rate 58% over a 4-day window

Avoided-disruption value RM 720k (14,000 EPF transactions Mon-Tue post-holiday)

ePerolehan call-off MOF/T-2026-042 against MAMPU panel vendor Kemaman Power

Confirm Kemaman Power technician schedule for 26-May by 17:00 today

Pre-position 600 kVA mobile genset from MAMPU emergency pool at PTG Klang as backup

Probability ~22% one of the three final services slips to 27-May, leaving a 24-hour gap before Aidilfitri. Mitigation: pre-position swap-in mobile genset from MAMPU emergency pool at MITI HQ as contingency.


ST peak premium climbing; need DG sign-off to implement batch-shift before billing cycle ends 31-May

If implemented by 26-May, savings of RM 192k/month captured starting June bill (saving RM 64k in the May partial month). Three ministries (Treasury, MOHE, MOH) need to acknowledge the batch-window change. Treasury CIO has acknowledged; MOHE and MOH pending.

MAMPU-PDSA Cyberjaya 7-day avg ST peak load: 430 kW (vs off-peak avg 218 kW)

Batch/reporting workloads (JPA, EPF, Audit) = 38% of peak-window load

ST ToU C2 tariff: peak premium RM 0.46/kWh vs off-peak RM 0.21/kWh

MAMPU change-control ticket CR-2026-0418 drafted; PDPA review clean

Three-ministry sign-off (Treasury, MOHE, MOH) required under MAMPU IT guidelines

Escalate to DG for MAMPU change-control authority sign-off by 25-May

Phase-in plan: non-payroll workloads 26-May, payroll workloads from 28-Jun cycle

Probability ~28% Treasury escalates if batch-shift coincides with month-end JPA payroll cycle (payroll lands 27-May this month). Mitigation: phase-in non-payroll workloads first; payroll moves from June cycle.


Bulk-query anomalies accelerating; forensic preliminary findings due 25-May AM

Daily anomalous events up to 28/day; CSM forensic team has preliminary findings expected Mon 25-May 09:00. SISTANIS read-API now isolated from MAMPU GDX (citizen-impact: 4-hour outage on non-critical JPN lookups, mitigated via cached records). DG and Chief Secretary briefed verbally; JPDP not yet notified (breach not confirmed).

SISTANIS anomalous bulk-query events: baseline 4/day → 28/day over 7-day window

Source IPs concentrated in 2 MAMPU-managed ranges (contractor service account suspected)

Scope of potential exposure: name, IC, address (no biometric, no MyKad PIN) for ~84,000 records (preliminary)

CSM (CyberSecurity Malaysia) engaged under MAMPU IRT-2026-007 standing arrangement

PDPA Section 130: 72-hour JPDP disclosure clock from formal breach confirmation

Pre-draft JPDP Section 130 disclosure letter and Chief Secretary statement; finalise post-25-May findings

Brief Director-General and Attorney-General's Chambers (AGC) on Akta Rahsia Rasmi pathway by 24-May 18:00

Probability ~52% forensic confirms breach Mon 25-May; in that case 72-hour PDPA disclosure clock starts and JPDP notification must be filed by Thu 28-May (Aidilfitri eve, complicating media-cycle management). Akta Rahsia Rasmi implications under review by AGC.


Mon 25-May IC-renewal queues forecast 240-min; only escalation can prevent breach

Reroute campaign at 41% conversion (target 55%); MyEG capacity now constrained — 9 of 12 KL Selangor kiosks above 88% utilisation. Citizen NPS 38, lowest in 11 months. Aidilfitri long weekend starts Thu 28-May, so demand will not naturally subside.

JPN Putrajaya IC-renewal counter: forecast 240-min wait Mon 25-May (capacity 92/hr vs arrivals 380/hr)

Citizen NPS slip: 57 → 38 across the 7-day window

MyEG IC-renewal kiosk utilisation Alamanda 53%, IOI City 47% (vs 88% target threshold)

MAMPU GDX citizen-data exchange logs show 18,400 booked appointments Mon-Wed

Public-complaint volume on X/Threads up 3.2x WoW for #JPN tag

Stand up satellite IC-renewal counter at PutraMall food court (4 stations) for Mon-Wed; ePerolehan emergency procurement ref MOF/T-2026-038 for furniture rental

Extend MyEG RM 5 fee waiver through Wed 27-May; project additional RM 184k cost vs RM 1.8M staff-time saving

Probability ~81% Mon 25-May breaches 180-min wait at JPN Putrajaya without an extraordinary measure (satellite counter at PutraMall + extended MyEG fee waiver). Star/BH cycle likely; potential Auditor-General observation. PDPA implications nil — channel shift only.

Civil-service roster stretched; emergency JPA scheme C19 mobilisation

Need 22 additional counter+concierge staff Mon-Wed across PutraMall satellite + Alamanda + IOI; current OT bank covers 60%. Recommend JPA emergency lateral from neighbouring JPN Cyberjaya office (under-utilised this week).

JPN Putrajaya: 14 counter FTE projected surplus Mon-Wed under channel-shift scenario

JPA HRMIS shows OT bank at 72% utilised — RM 47k headroom available before scheme cap

CUEPACS branch lead briefed previously on Aidilfitri surge framing

Kiosk concierge demand: +6 FTE Sun-Mon at Alamanda + IOI City clusters

JPN Cyberjaya office under-utilised at 41% counter load Mon-Wed

Issue JPA scheme C19 emergency lateral order for 9 officers from JPN Cyberjaya, 25-27 May

Brief CUEPACS branch lead on Aidilfitri citizen-service framing by 24-May 18:00; OT pre-approval RM 47k

Probability ~35% that lateral mobilisation triggers a CUEPACS grievance unless framed as Aidilfitri citizen-service surge; JPA scheme compliance reviewed by HR Chief.


PTG counters at 13% utilisation — opportunity cost RM 18k/day; escalate to DG decision this week

With Aidilfitri 4 days away, PTG counter utilisation has dropped to 13% (citizens deferring land transactions). This is the cleanest data window to lock the business case. Annual saving now RM 6.4M; payback 14 months.

PTG 4-site counter utilisation 90-day avg: 19% → 13% (target threshold 60%)

e-Tanah portal absorbs 78% of land-search transactions YTD (vs 41% in 2024)

Drive-isochrone study: 100% of physical demand within 45-min of PTG Shah Alam

Annual saving RM 6.4M: opex RM 1.6M + Sepang lot property-yield RM 4.8M

PTG Sepang lease termination clause Dec-2026 — natural exit window

Submit consolidation board paper to DG by 26-May for 5-Jun board cycle

Request MB Selangor virtual town-hall slot in week of 8-Jun

Probability ~62% MB Selangor accepts a virtual town-hall instead of physical, accelerating timeline by 2 weeks. Akta Rahsia Rasmi land-title custody plan reviewed and approved by Pengarah Tanah.

Facility readiness 78%; one critical path item is biometric-capture ICT certification

PTG Shah Alam Level 3 fit-out designs approved; only MAMPU ICT certification for biometric capture remains (typical 21-day cycle). Property valuation for Sepang lot conversion confirms RM 4.8M annual yield uplift.

Combined 4-site opex: RM 137k/month (security, utilities, ICT)

PTG Shah Alam Level 3: 380 sqm spare; fit-out costed at RM 1.1M

PTG Sepang lease-exit notice deadline 30-Jun to hit Dec-2026 termination

MAMPU Panel Contract PC-2025-12 covers IT-asset transfer logistics

Land-title cabinet relocation plan (Akta Rahsia Rasmi) reviewed by Pengarah Tanah

Submit MAMPU ICT biometric-capture certification request by 26-May

Stand up parallel UAT under MAMPU GDX sandbox 27-May

Probability ~30% MAMPU ICT certification extends to 28 days, pushing go-live to mid-Jul. Mitigation: parallel-track UAT under MAMPU GDX sandbox starting 27-May.


All 11 generators serviced and certified; Aidilfitri readiness confirmed

Final service completed 24-May 16:30 at EPF Petaling Jaya. All 11 critical gensets carry valid service certificates, full diesel tanks (avg 92% capacity), and have been load-tested under 70% load for 30 min each. MAMPU emergency mobile genset on standby at PTG Klang.

11 critical gensets across 9 service points (EPF, JPN, PTG); sizes 250-800 kVA

Aidilfitri long weekend 28-31 May: no contractor mobilisation available

Historical Klang Valley grid-trip base-rate 58% over a 4-day window

Avoided-disruption value RM 720k (14,000 EPF transactions Mon-Tue post-holiday)

ePerolehan call-off MOF/T-2026-042 against MAMPU panel vendor Kemaman Power

Approve service certificates and close ePerolehan PO MOF/T-2026-042 by 26-May

Confirm holiday on-call roster: 2 facility officers + Kemaman Power 1-hour SLA

Probability ~8% of any service-point downtime during 28-31 May Aidilfitri window. Residual risk concentrated at PTG Klang (oldest unit, 2014-vintage); mobile backup mitigates. Audit-General evidence pack (certs, load-test logs) filed in MAMPU GDX.


Batch-shift now competing with Aidilfitri freeze-window; escalate or defer to June board

MAMPU change-control freeze starts 27-May 18:00 through 1-Jun (Aidilfitri shutdown). Either DG authorises implementation today (24-May) to capture May partial savings RM 64k, or this slips to 2-Jun for July billing cycle. Three-ministry sign-off still pending for MOH.

MAMPU-PDSA Cyberjaya 7-day avg ST peak load: 432 kW (vs off-peak avg 218 kW)

Batch/reporting workloads (JPA, EPF, Audit) = 38% of peak-window load

ST ToU C2 tariff: peak premium RM 0.46/kWh vs off-peak RM 0.21/kWh

MAMPU change-control ticket CR-2026-0418 drafted; PDPA review clean

Three-ministry sign-off (Treasury, MOHE, MOH) required under MAMPU IT guidelines

Escalate go/no-go decision to DG by 25-May 09:00

If defer: lock 2-Jun board paper for July billing-cycle implementation

Probability ~45% the freeze-window forces a defer; in that case RM 64k partial-month savings forgone. Lower-regret option may be to defer to 2-Jun board and capture clean July cycle. PDPA review confirms no citizen-data implications; MAMPU IT guidelines clean.


Forensic preliminary indicates unauthorised access; PDPA 72-hour clock starts Mon 25-May AM

CSM forensic preliminary (delivered 24-May 16:00) indicates unauthorised bulk extraction of ~84,000 citizen records over 11-day window, likely via compromised contractor service account. Records scope: name, IC, address (no biometric, no MyKad PIN). PDPA Section 130 disclosure obligation triggers Mon 25-May 09:00 (formal finding); JPDP must be notified by Thu 28-May 09:00 (Aidilfitri eve).

SISTANIS anomalous bulk-query events: baseline 4/day → 34/day over 7-day window

Source IPs concentrated in 2 MAMPU-managed ranges (contractor service account suspected)

Scope of potential exposure: name, IC, address (no biometric, no MyKad PIN) for ~84,000 records (preliminary)

CSM (CyberSecurity Malaysia) engaged under MAMPU IRT-2026-007 standing arrangement

PDPA Section 130: 72-hour JPDP disclosure clock from formal breach confirmation

Trigger formal breach protocol Mon 25-May 09:00 post-final-finding; file JPDP Section 130 notification by Thu 28-May 09:00

Pre-position citizen-notification (84k SMS) via MyGovernment app for 28-May 08:00 distribution; brief Cabinet Communications Unit by 25-May 14:00

Suspend compromised contractor service account; revoke MAMPU GDX integration credentials immediately

Probability ~88% breach is confirmed in final report by Wed 27-May. Mandatory disclosure during Aidilfitri eve creates significant media-cycle risk; recommend pre-positioning Chief Secretary statement and proactive citizen-notification SMS via MyGovernment app on 28-May 08:00. PDPA penalty exposure RM 4-8M; AGC reviewing Akta Rahsia Rasmi liability for compromised contractor.