body-container-line-1
21.05.2018 Headlines

$89m Telecom Deal Puts Ghanaians’ Data At Risk

By CitiNewsRoom
89m Telecom Deal Puts Ghanaians Data At Risk
21.05.2018 LISTEN

President of IMANI Africa, Franklin Cudjoe has rubbished the Ministry of Communications' clarification on the $89 million contract with a Haitian firm, KelniGVG for the provision of oversight and revenue assurance monitoring equipment.

There has been a back and forth between IMANI Africa and the Communications Ministry over the deal which the former believes mirrors the State’s controversial agreements with Subah Infosolutions and Afriwave Telcom Ltd in 2010 and 2016 respectively.

The government in a statement issued and signed by Communications Ministry has however clarified that the deal is instead providing significant savings f or the state for even more work done than in past deals.

However Franklin Cudjoe, in a statement said the Ministry's response only “opens a huge can of telecom worms.”

In justifying calls for the abrogation of the deal with KelniGVG, Mr Cudjoe said the company, though registered in 1995, only got its website registered in 2017, adding that no experience had been listed in undertaking the tasks they had been awarded millions for.

Mr. Cudjoe further argued that the deal will only put the data of Ghanaians at risk, saying “Ghanaians will have their data threatened if they allow this GVG company to play with their phone calls, chats, everything. Mind you, this is a company with a website that is so vague it is phoney, with very strange characters behind it since all it has, for a security company of its pedigree, are stock photos.”

Mr Cudjoe raised similar concerns on Citi FM’s News Analysis Programme, The Big Issue questioning why the government failed to do due diligence before sealing the deal.

In a direct response to a deputy Communications Minister, George Andah, Mr Cudjoe questioned whether there was a tender document regarding the deal.

“Is there a tender document. Was it published. He is saying this was done properly, let us see the tender document, let us see exactly who are the owners of… These are the matters that were dealt with as members of Occupy Ghana so if today you on the other side please respect the principle”

The statement from IMANI Africa is below
IMANI to Ministry of Communications (MoC); Your Response to Publication Opens A Huge Can of Telecom ‘Worms’.

a. IMANI’s First publication : IMANI ALERT: Of Telecom Revenue Assurance and the Game of Musical Chairs by the Ministry of Communications

b. Ministry’s Response: Gov’t debunks IMANI claims on ‘Subah-like’ deal

c. IMANI’s Response
1. So if the pre-existing contracts have been terminated, why is there a current injunction by Subah? Subah has taken MoC, NCA to court and won an injunction which restricted the Telcos from dealing with any new service provider because they have a legitimate contract with government. Why will the MoC not wait to close all outstanding issues with Afriwave and Subah but proceed to issue letters of termination and assume that is how contracts are terminated?

2. At the February 2017 Holiday Inn meeting, IMANI has been engaged that indeed the alignment was for the NCA and GRA to own the capacity to do the monitoring of revenues, but everyone is shocked that another private company has been engaged at a staggering cost of $90Million monitor and find what exactly?

3. Why is the Minister who is a lawyer paying almost $1.5million a month for 5 years to a new company to look for what does not exist or waste time on mistrust? If Minister talks about international benchmarks and standards, don't we rather pay the company only if they find hidden revenue? Is that not how companies who come to look for oil get paid? Should it not be you find, you earn a percentage? The Ministry's own statement says they contracted GVG in December 2017 but their activities/ services will only be functional in July 2018. So, why pay then $1.5m a month for being non-functional until July 2018?

4. See by our checks, none of the major Telcos have connected to anything GVG. The fully equipped common Monitoring system referred to by the Minister is probably equipped devices which are a figment of their imagination and certainly is not anything the mobile telecom industry is aware of.

5. How rationalizing $2.5m to $1.5 from voodoo contracts does makes you assume you are saving so you can enjoy from a bad contract? Exactly what basis was used to cost the service, and what exactly is the work order being executed to warrant outstanding payments of $7.5million till date?A Ghana beyond aid will not happen with projects that do not pass value for money audits tests.

6. What is the actual estimate of calls lost to simbox fraud per month that should require monthly outlays of $1.4 million? We need the data on estimated losses through SIMBOX fraud, and that data should tell all Ghanaians whether the SIIT related law in itself isn’t redundant.

7. In testing the system so far, is there any variance between CDR data and the data they purport to be getting from GVG’s system?

8. The GHIPPS system is the clearinghouse that clears all of Ghana’s formal financial transactions at the moment. Is the Ministry of Communication saying that GHIPPS data cannot be trusted and therefore they need extra systems to validate OUR NATIONAL clearinghouse data?

9. Are we saying that we simply trust that the data checks will not be intrusive just because NDAs were signed? Are the GVG people angels? What is the actual technical specification of the systems they are putting in place and how exactly is user data being obfuscated? We know in the case of the CDRs the caller phone numbers were hashed in the reports. Tell us how by connecting directly to telcos in their internal infrastructure in such an intrusive manner this will be executed.

10. Can we trust a company that is being paid $89 million over 5 years not to have a simple website, when even tabletop entrepreneurs with annual turnover of 1000 cedis / $250 have websites?

• Why are they so secretive?
• Why don’t they have a secure website?
• Why do they not have search indexes on Google?

• Why, as a technology company since 1995 they do not have any clients listed on their websites?

• Why do they have a dubious domain hosting redirect platform? Even the CIA and the NSA have actual websites with actual information

• How do we pay $89 million with an automatic renewal of another $89 million over 10 years for an IT company which does not even pay attention to simple and basic website protocols?

• How Come the website of the company was registered only after Christmas last year, even after they signed a contract?

• How Come not a SINGLE engineer or IT specialist of them has their CV anywhere?

11. How was the procurement done under the supposed laws of Ghana, and what does the law saw for contracts about $90million dollars? No tender? No due diligence, their website exposes a lot.

12. Who is fronting for GVG? Can we start seeing their owners?

13. Mobile money monitoring? Who's purview? Is mobile money which is aiding financial inclusion a taxed service to guarantee monitoring? This is a needless component of this deal. Central Bank and MoF is in charge of the financial space.

14. In any case where is the Finance Minister's signature on the contract and on this statement only the MoC is driving?

15. They should call the Attorney General and ask where she is, in all this ongoing court cases injunctions and cancellation of contracts.

16. Ghanaians will have their data threatened if they allow this GVG company to play with their phone calls, chats, everything. Mind you, this is a company with a website that is so vague it is phoney, with very strange characters behind it since all it has, for a security company of its pedigree, are stock photos.

17. In summary we refer to Mr. Kwaku Sakyi Addo's statements in 2014 which called Subah “irredeemably incompetent” or fatally fraudulent” for being paid 75million for no work done. These comments are rich even today and maybe we should start hearing also from the author who is the current board chairman of the NCA paying these monies to GVGKelni

SUSPICIOUS EXHIBITS FROM THE WEBSITE OF COMPANY GVGKELNI

Please take a good look at the company that will be handling your data and for which we have handed them a little under $90m contract to monitor calls and ensure revenue, both requiring some appreciable of security. See all exhibits attached.

Exhibit one: Website was registered on 27th December 2017, but the registrants have been hidden. This company was said to be registered in 1995 in Ghana, but only got its scanty website registered in 2017 listing virtually no experience in undertaking the tasks they have been awarded millions of $$. GVGkelni is a subsidiary of the Haitian- based GVG.

Exhibit 2: The website is not secure. This is a company handling our secure telephone conversations, text messages and MoMo platforms, yet their most basic window to the world shows an insecure website which even after typing the right link (www.kelnigvg.com) leads to a very dubious looking URL in the photo below.

Exhibits 3 & 4: Compare to Parcus Group, and ARAXXE, which offer similar services. You will see the secure tab and the website prefix https:// and a padlock sign, showing that the most basic levels of security are on the website. This is a mark of a professional entity

Exhibit 5: On the Homepage is The Telecom Gurus. Ironically, when you click on Learn More, this is what you are educated with:

Exhibit 6: What you see when you click to learn more about our Telecom Gurus: They are all placeholders from a WordPress template made by designers called Ancora, in fact, the facebook and twitter links on the site lead to Ancora Themes. You can go ahead and click it

Exhibit 7: Their impressive list of clients after 22 years in operation in about seven different service areas are on this page. As you can see, the clients are probably the number of alphabets on the page.

Exhibit 8: Just so you know there are no other such domains registered, here is a who search result is:

1. One may ask the question, that why is it that a company commanding such millions and such sensitive information can't even get a website right?

2. Can we trust a company that is being paid $89 million over five years not to have a simple website, when even tabletop entrepreneurs with an annual turnover of 1000 cedis have websites?


By: Marian Ansah/citinewsroom.com/Ghana

body-container-line