Securities and Exchange Commission

Browse over 2718 requests from this government agency

Go Back

  • REQUEST SUBMITTED

    You have submitted an FOI request

    Date: 2023-06-27 11:44:30.564388

  • PROCESSING REQUEST

    Your request is already in review

    Date: 2023-06-27 11:55:06.226633

  • REQUEST SUCCESSFUL

    Your request was successful

    Date: 2023-06-29 15:38:14.177493

  • 4

    RATE YOUR REQUEST

    How was your request?

Security of E-Fast Online Accounts

Requested from SEC by M. Catalan at 11:44 AM on Jun 27, 2023.
Purpose: Research and raise awareness to the department in-charge of managing the accounts of corporations
Date of Coverage: 06/27/2023 - 06/27/2023
Tracking no: #SEC-270868434788

Catalan 11:44 AM, Jun 27, 2023 

Hi, I would like to request an info on how secure E-Fast Online Accounts because of instances like this:

1. Enrolled account information are being altered without the knowledge of the Authorized Representative/Company i.e. Passwords and Official Email Address used to enroll for the account is changed into an unknown Email Address and

2. No Two-Factor Authentication for log-in for security

This is a concern as experienced recently and very alarming considering the account for online submission should only be accessed by authorized personnel. Unauthorized reports are made too.

Gonzales 11:55 AM, Jun 27, 2023 

June 27, 2023

Dear Mary Grace,

Thank you for your request dated Jun 27, 2023 under Executive Order No. 2 (s. 2016) on Freedom of Information in the Executive Branch, for Security of E-Fast Online Accounts.

We received your request on Jun 27, 2023 and will respond on or before Jul 18, 2023 11:44:30 AM, in accordance with the Executive Order's implementing rules and regulations.

Should you have any questions regarding your request, kindly contact me using the reply function on the eFOI portal at https://www.foi.gov.ph/requests/aglzfmVmb2ktcGhyHQsSB0NvbnRlbnQiEFNFQy0yNzA4Njg0MzQ3ODgM, for request with ticket number #SEC-270868434788.

Thank you.

Respectfully,

Isma Gonzales
FOI Officer

Chato 03:38 PM, Jun 29, 2023 

June 29, 2023

Dear Mary Grace Catalan,

Greetings!

Thank you for your request dated Jun 27, 2023 11:44:30 AM under Executive Order No. 2 (s. 2016) on Freedom of Information in the Executive Branch.

Your Request

You asked for Security of E-Fast Online Accounts.

Response to Request

With regards to your query, kindly be informed that;
1. The changing of credentials particularly the official and alternate email addresses is within the control of the company unless the access was shared to other filers within the company and alteration can be done. Any changes to be made on email addresses is subject for validation to be done by the company or the authorized filer. As such, the full control is with the company. Password of each account is also under full control of the company and changing the password through the “Forgot Password” facility requires three data elements attributed to the account, specifically the username of the company, official email address where 6-digit validation will be sent and the SEC Registration Number. Any inconsistent data to be provided in changing the password will not proceed as a security mechanism of the system.

2.  As mentioned, the control of the account is within the company and the authorized filer is given the privilege to file/upload reportorial requirements if it is granted by the company. Any authorized access or submission is not possible unless the credentials are being shared to others. This instance is possible on companies that are under intra-corporate dispute in which the credentials were shared and it is transparent to both parties who claim the account. To ensure the security of the account, the company must update the password if necessary and avoid sharing of credentials. 

I hope that this clarifies your concern.

Thank you.

Respectfully,

Oliver V. Chato
FOI Receiving Officer

Is this request offensive?

Requests for personal information and vexatious requests are not considered valid requests for Official Information.

If you believe this request is not suitable, you can report it for attention by the site administrators.