Friday 22 August 2008

Criminal data loss

On the 25 June 2008, the Cabinet Office decreed that all government departments would have to encrypt important information held on discs, USB sticks or laptops in its wide ranging review of security practices. This conclusion could be either seen as a sensible approach to managing the vast data government holds or, less charitably, a statement of the obvious.
If it were a statement of the obvious, it wasn't quite obvious enough. Data handing procedures in government: final report doesn't seem to have been read, or understood, or acted upon by the Cabinet Office's colleagues at the Home Office or by suppliers to the Home Office. Less than two months after the tome hit the streets, the UK government is once again mopping up after at another hugely embarrassing loss of data.
Back in February I wrote on this blog. Data loss has become a running story over the last few months. Not so much is the question "Has there been a data breach?" more a case of "Who now?"
And that "Who now?" question keeps being repeated. It is hard to think of a government department which hasn't mislaid data. There is something of a routine to all this: government department confesses to the latest cock up. This is followed by emerging of embarrassing details. Opposition politicians express their outrage, experts express their opinions and inquires are set in train. And then another data loss comes to light (repeat above).
In this latest example, my thought processes go like this: so at one stage the data on 84,000 criminals was encrypted, that's good. And then it was decoded, well OK maybe that was necessary so the data could be used. Then the decoded data was put on a memory stick. At this point I want to shout: "What did you do that for?"
The Times reported this morning that Home Secretary Jacqui Smith was furious. Who can blame her? The BBC reported that PA Consulting has searched its premises and looked at CCTV recordings in an attempt to recover the missing memory stick. If the security guys and gals at PA start by questioning everyone who has a pocket, wallet, handbag or briefcase that should narrow it down. Unbelievable (again).

No comments:

Post a Comment