Wing Leading Edge — Official Statement

Wing Leading Edge confirms that, starting April 2023, it has been providing services under a public procurement contract signed with the National Agency for Cadastre and Land Registration (ANCPI), covering software maintenance services for the eTerra platform — one of the IT applications the institution uses in its day-to-day operations. The eTerra system has been developed and used for more than two decades in cooperation with several local companies, and is a complex software platform in continuous evolution.

According to the public procurement documentation, the object of our contract is the provision of software maintenance services for the eTerra application component, structured in two categories: corrective and routine maintenance and evolutive maintenance.

The contract covers software maintenance services and does not assign Wing Leading Edge responsibility for the operational administration of ANCPI's IT infrastructure (hardware, operating systems, virtualization platforms, databases, etc.), nor responsibility for operating the cybersecurity services related to the institution's IT infrastructure.

What corrective and routine maintenance involves

These services keep the eTerra application in good working order. The provider receives and analyzes incident reports related to the application's functioning, identifies and fixes any software defects, tests the implemented solutions, provides technical support, monitors the application's operational parameters, installs software updates, and adapts the application to legislative changes or to new versions of the underlying software components.

What evolutive maintenance involves

These services develop and improve the eTerra application in line with requirements formulated by ANCPI. Activities include requirements analysis, solution design, development and testing of new functionalities, their implementation, and updates to the technical documentation, so that the application keeps up with legislative changes and the beneficiary's operational needs.

The tender documentation also contains requirements regarding periodic security assessments performed within the contracted services. Out of respect for contractual confidentiality obligations and cybersecurity good practices, we cannot comment on the specific activities carried out, their results, or the communications exchanged between the parties on these matters.

We would like to emphasize that the complex IT systems used in public administration are made up of numerous technical and organizational components, administered by different teams and vendors, each with distinct contractual responsibilities. For this reason, the causes of any cybersecurity incident cannot be assessed by looking exclusively at a single contract or a single vendor.

Details of the contractual responsibilities assumed by Wing Leading Edge are available in the public procurement documentation published by ANCPI on the SICAP platform.

Out of respect for contractual confidentiality obligations and cybersecurity good practices, we cannot comment on the operational activities carried out under the contract, the communications between the parties, the technical measures implemented, any security assessments, or the handling of specific incidents.

Any official information regarding the cybersecurity incident and the measures adopted in relation to it can be communicated exclusively by ANCPI, as the owner and administrator of the system.

Wing Leading Edge carries out its activity in compliance with its contractual obligations and applicable professional standards, and remains available to cooperate with the competent authorities, within the limits of its contractual and legal responsibilities.