Myanma Posts and Telecommunications (MPT) is Myanmar's first and longest-operating telecom, founded in 1884 and running state-owned infrastructure at scale: over 21 million users across fixed and mobile networks, backed by a Joint Operations Agreement investment exceeding $2 billion over ten years. The technical surface area spans legacy fixed-line systems, 3G, and 4G/LTE+ data services - a sprawling attack environment where uptime, lawful intercept, and subscriber data protection aren't abstract concerns. Over 8,000 employees manage this stack across the country.
For security practitioners, MPT presents a threat model shaped by its position as critical national infrastructure in a politically volatile region. The cybersecurity mandate here covers telecom-specific domains: signaling protocol security (SS7/Diameter), mobile core network hardening, lawful intercept integrity, subscriber privacy under state ownership, and defense against the kind of targeted persistent threats that nation-state telecoms attract. Legacy protocol stacks and rapid 4G expansion create the classic tension between speed-to-deploy and security-by-design.
The team operates within a state-owned enterprise framework, with CSR programs in education, healthcare, and business incubation. Security roles here are less about corporate perimeter defense and more about protecting the communications substrate of an entire country - a different risk calculus, a different operational tempo.
