"Encrypt, encrypt, encrypt" is the message, after more CD-ROM database woes
Printer friendly
"The News of the World has revealed that a former contractor for the Department for Work and Pensions had two CD-ROMs containing details of thousands of benefit claimants in her possession for more than a year," said Calum Macleod, European Director with Cyber-Ark.
"Coming so soon after the HMRC CD-ROM Fiasco, this highlights several errors of procedure within a number of government departments. It also highlights the need for all organizations, whether public or private sector, to control who has access to their data encrypt their company and client databases," he added.
The Department for Work and Pension CD-ROMs - which reportedly contained the names, addresses, DoB and NI numbers of up to 18,000 claimants - languished in the former contractor's possession after she left the government agency and forgot to return the disks.
"There are several significant errors of procedure here. Access to the data should only be possible with the permission of senior internal staff, the disks should have been encrypted, and should not have left the office without audit logging systems being applied, and should have been retrieved by the agency following the contractor's departure," said Macleod.
"It's unlikely that anybody's head will roll for this second CD-ROM database fiasco, but until such time as the public sector and the government invest in the technology that is readily available to avoid these repeated breaches of the data protection act they should put their national ID scheme on ice. Who knows what else is out there in the public domain," he added.
Related links to this article:
For more on the DWP CD-ROM data loss:
Cyber-Ark
Finalists announced in the 2007 e-Government National Awards
81 finalists (detailed at this link) have been chosen from among the record 527 nominations received in this year's e-Government National Awards 2007. 11 Awards categories will recognise this year's "best of the best" strategies, achievements, teams and individuals in UK public sector web, ICT & e-Government services. The judging panel was headed by Government Chief Information Officer John Suffolk (based at Cabinet Office).
The winners will be announced and presented with their e-Government National Awards on 22nd January 2008 at a black-tie dinner at the Dorchester Hotel in London. Finalists may book tickets at this link
Platinum sponsor is KPMG.
Also a sponsor is O2.
The Awards are supported by the Government Chief Information Officer (Cabinet Office), the Office of Government Commerce, the Society of Information Technology Management (Socitm), and SOLACE (Society of Local Authority Chief Executives and Senior Managers).
- Login or Register to comment
- Add to a social bookmarking site
The Dispatch Box: A portfolio management approach to reducing the public sector deficit
Chris Mills, partner in PIPC’s Portfolio Management Practice, discusses how government can strike the right balance between cutting deeply and protecting critical investments...
"Research has repeatedly shown that over 50% of potential value from project investments is wasted year after year, through a combination of poor selection and sub-optimal execution.Clearly we can no longer afford such waste but getting the balance right between cutting deeply and protecting critical investments will be a major challenge for whichever government is in power after the election."
"So, what’s the answer?" Read more
Frontline Club: Digital Election 2010
A panel discussion on the importance of social media in determining the outcome of the forthcoming general election, recorded at the Frontline Club in London.