LTA to conduct independent tests to ensure public buses cannot be controlled remotely by manufacturers

“LTA will conduct additional independent technical assessments to verify this,” he added. 

Mr Siow was responding to questions from MPs Joan Pereira (PAP-Tanjong Pagar) and Melvin Yong (PAP-Radin Mas) on how cybersecurity concerns involving electric public buses are being addressed.

Focusing on these vehicles, Mr Siow said: “Public electric buses are an essential public transport service. Hence, cybersecurity vulnerabilities carry higher risk and impact on public safety and service continuity.”

He noted that LTA requires the manufacturers of all electric buses in its fleet to have “certified cybersecurity controls to prevent, detect and respond to cyber threats across the vehicle lifecycle” and ensure the security of over-the-air, or wireless, software updates.

“Any software updates or changes needed today are executed by authorised personnel on-site at the bus depot using a wired connection, only after LTA has verified the purpose of the updates and given approval,” he said.

Noting that over-the-air updates for electric public buses are increasingly common and necessary to swiftly patch vehicle software vulnerabilities, he said that LTA is working closely with government cybersecurity agencies to look into the safe transition from wired to over-the-air updates for its buses.