What MARINA’s system failure reveals about government readiness - Inquirer Technology

MANILA, Philippines — In the digital age, it only takes one cyberattack to bring a government service to a halt. When the Maritime Industry Authority’s (MARINA) seafarer document system was hit, the disruption exposed a problem beyond the attack itself: an aging digital infrastructure that had been waiting years for an upgrade.

The agency temporarily suspended SID and SRB processing nationwide as it worked to secure its systems and determine what had happened. MARINA later said it detected multiple suspicious activities but found no data loss or indication that seafarers’ personal information had been obtained.

But the disruption exposed a problem that goes beyond the attack itself.

MARINA said its digital infrastructure dates back to 2017 and has yet to undergo a comprehensive technical refresh. The agency also does not have a dedicated disaster recovery system that can immediately take over when its main systems fail.

This was not simply an IT issue. The SID and SRB are important documents for those preparing for deployment. When processing was suspended, MARINA had to resort to temporary measures for seafarers with immediate deployment requirements.

From Aug. 13 to 29, MARINA processed expedited applications and issued 2,492 certifications as an interim measure. It later activated an interim processing system at its Central Office, allowing expedited applicants to receive their actual SID and SRB starting Sept. 1.

The response shows that government agencies can find ways to keep services moving during a disruption. But it also raises a more uncomfortable question: Why should a critical government service have to rely on emergency workarounds before it can continue operating?

A cyberattack will never be completely avoidable. What government agencies can control is how much damage an attack can cause and how quickly essential services can recover.

An agency can have cybersecurity protocols in place, but if an attack forces its primary system offline and there is no dedicated backup environment ready to take over, containment can still mean prolonged disruption.

Cybersecurity, therefore, is not only about keeping attackers out. It is also about making sure the government can continue functioning when attackers get in.

This is where MARINA’s aging infrastructure becomes more than a technical concern.

The agency said it had already identified the need for modernization in 2024 and had been seeking funding for a nationwide technology refresh. 

The proposed upgrade was not funded at the time. MARINA is now seeking about ₱150 million for hardware replacement and software updates, plus another ₱100 million for a dedicated disaster recovery system.

The timing is telling. Modernization is often treated as a long-term government project, something that can be pushed to the next budget cycle while existing systems continue to work.

The vulnerability can build quietly as hardware gets older, software remains unchanged and backup systems remain unavailable. By the time a cyberattack exposes those weaknesses, modernization is no longer simply about improving technology. It becomes about restoring a service that people already depend on.

And that is the larger issue MARINA’s experience raises for the government, why? As more public services move online, agencies are becoming increasingly dependent on digital systems to perform basic functions. That makes the reliability of those systems just as important as putting the services online in the first place.

A government website may make a transaction more convenient. But convenience means little if the system can suddenly become unavailable for weeks.

The measure of digital government, then, should not stop at how many services have been digitized. It should also ask whether those services can survive disruption.

MARINA’s response has shown that temporary solutions can keep essential services moving. But temporary fixes should not become the default answer to infrastructure problems that have been identified years earlier.