The Register® — Biting the hand that feeds IT

Comments on: HMRC manual on data protection was protected data

Typical! 

Posted Monday 17th December 2007 13:18 GMT

Oh its about security therefore we must make it secret!

This obsession with security guidelines and documents is pointless if the morons just ignore the rules anyway and tell the office junior to send the disks anyway.

Some of these managers need to be exposed and fired, otherwise any investigation is nothing more than wasting MORE taxpayers money.

HMRC Manual 

Posted Monday 17th December 2007 13:18 GMT

Stop

"But a spokeswoman for the department said there were several sets of procedures within the department."

Yes -

There was one in the Directors safe.

The Confidential Documents office had one in its safe.

The Assistant Undersecretary had one in his safe.

As did the Undersecretary in his safe.

The Permanent Secretaries Political Adviser had one. She doesn't have a safe, but she doesn't work in the same building as they do (or the same city actually) so that doesn't matter.

The Security Office also had one, but they lost theirs. The Security Office are looking into the loss.

But..... 

Posted Monday 17th December 2007 13:32 GMT

Black Helicopters

....surely the information that the procedures are restricted must also be covered by a security restriction.

I can just hear Sir Humphrey now... 

Posted Monday 17th December 2007 13:48 GMT

Joke

"But, Minister, the manual was far too sensitive to be made available to everyone - just think of the embarassment if our manual on security procedures was leaked due to lax security procedures!"

Hehehe...

Yes Minister. 

Posted Monday 17th December 2007 13:58 GMT

That is all.

Repeat after me 

Posted Monday 17th December 2007 14:05 GMT

Security through obscurity does not work!

...restricted to civil servants only. 

Posted Monday 17th December 2007 14:27 GMT

From the language in the rest of the article I assume you mean *senior* civil servants? Even junior staff are still civil servants.

I give up. 

Posted Monday 17th December 2007 14:43 GMT

Every time we try to take the piss out of these beggars they go and trump us with real world examples.

I'd suggest that this was all caused by poor advice from the Permanent Secretary's closest advisor, an imaginary pink giraffe called Cyril, but it'd probably turn out to be true.....

in keeping with this new practice... 

Posted Monday 17th December 2007 15:26 GMT

Black Helicopters

... the next general election will be performed by marking an "X" in a box beside the numbers 1-6. No reference will be made to which lizard... oops sorry, political party, each of the numbers 1-6 relate to until after the votes have been cast and counted. This move is intended to reduce the number of "spoiled" papers.

Dark age numb nuts. 

Posted Monday 17th December 2007 15:34 GMT

Pirate

The upper levels of HMRC really are a bunch of numb nuts living in the dark ages. The public are not evil gods who demand that some token sacrifice of a poor office scapegoat will satifiy our desire to see someone punished for their terrible, incompetent sins.

I feel sorry for the poor sacrificial goat they picked on. I can just see them being led into the slaughter office...

HMRC toff: "Bob, you were the one who sent out those discs which were then lost."

Scapegoat: "But you ordered me to do it Sir!"

HMRC toff starts booming: "Ha, I care not. May you be slayed by the purest of P45's, stripped of pension rights by meerly days of remaining service and liberally oiled ready for penetration. Oh public of Britian. I offer you this fresh sacrificial scapegoat as payment for our terrible sins. Mahahahaha!"....

@ Anonymous Coward 

Posted Monday 17th December 2007 15:39 GMT

Stop

"From the language in the rest of the article I assume you mean *senior* civil servants? Even junior staff are still civil servants."

Not necessarily. Anyone junior enough to actually be doing something will almost certainly have been outsourced/privatised/whatever...

--

Jonathon

Office Junior 

Posted Monday 17th December 2007 15:47 GMT

So, how come a mere "office Junior" and seemingly all and sundry have sufficient access rights to dump it all to CD anyway.?

@Martin 

Posted Monday 17th December 2007 16:10 GMT

surely the explanation is that personal details of 25mln people are much less sensitive than HRCM security procedures. Or so HRCM bosses believe. I wonder if these procedures can be made public under freedom of information act - that would teach them.

Scapegoat. 

Posted Monday 17th December 2007 16:24 GMT

@Mark.

There were two goats the one that was slaughtered and the one that was set free. The one set free was the scapegoat (eSCAPE GOAT).

So from this you understand that the scapegoat is not sacrificed or slaughtered.

Sorry for being pedantic.

Muppetry, pure and simple 

Posted Monday 17th December 2007 16:33 GMT

Thumb Up

I don't think I've ever heard such a tale of muppetry in all my life. It beggars belief that these people actually exist and can be in positions of power over the rest of us.

Now I know why there isn't a law against being stupid, it's so they don't have to lock themselves up.

HMRC manual 

Posted Monday 17th December 2007 16:34 GMT

This comes as no surprise to me. For the past 7 months I have been trying to get the HM manual of protective security from the cabinet office under FOI rules. This is the document that outlines the rules surrounding confidential/secret etc government documents.

Apparently it might not be in the public interest to release it. Can't have people call them on why things are confidential I guess...

@ Mark 

Posted Monday 17th December 2007 17:31 GMT

Happy

You missed one detail:

"HMRC toff, >> his face set in a firm 237-D (Righteous Indignation at a Subordinate's Attempt to Pass the Buck Upwards, tinged with Religious Ecstasy*)<< starts booming: "Ha, I care not. May you be slayed by the purest of P45's, stripped of pension rights by meerly days of remaining service and liberally oiled ready for penetration. Oh public of Britian. I offer you this fresh sacrificial scapegoat as payment for our terrible sins. Mahahahaha!"....

(* Thank you, Keith Laumer, wherever you are.)

To Rich 

Posted Monday 17th December 2007 17:52 GMT

"The scapegoat was a goat that was driven off into the wilderness as part of the ceremonies of Yom Kippur, the Day of Atonement, in Judaism during the times of the Temple in Jerusalem. The rite is described in Leviticus 16.

en.wikipedia.org/wiki/Scapegoat"

The scape goat is indeed the goat punished for the sins of others.

obvious really. 

Posted Monday 17th December 2007 18:51 GMT

The security standards were kept in the basement, in a locked cabinet, in a room marked "Beware of Tiger".

Meanwhile, the actual work instructions are stored in an office on Betelgeuse. Which is only fair as it's obvious the people in charge aren't really on this planet at all.

"Question Time" 

Posted Monday 17th December 2007 18:53 GMT

Flame

Did anyone see "Question Time" the other night ?

Near the end of the programme, the case of "the lost CDs" was mentioned as an example of Government incompetence.

At which, a well-known expert on factual reporting - Mr Piers Morgan - proclaimed it was not "a Government problem", as it was "well known that it was the fault of two people in the post department..."

.

.

I'm not sure which is worse:

That the man could sit there and spout such drivel with a straight face...

Or that no-one in the studio was either willing or able to correct him...

.

.

,

"For a successful technology, reality must take precedence over public relations, for nature cannot be fooled"

Richard Feynman

Rogers' Commission Report into the Challenger Crash Appendix F - Personal Observations on Reliability of Shuttle (June 1986)

Common Sense 

Posted Tuesday 18th December 2007 08:23 GMT

But personally I see it as common sense not to send millions of peoples personal records by post, regardless of security procedure. If anyone asked me to do it, I'd be seriously questioning the procedure.

Gagh! 

Posted Tuesday 18th December 2007 09:22 GMT

Dead Vulture

Not even the BOFH's The Boss could be *this* dim :-(

@TeeCee 

Posted Tuesday 18th December 2007 10:47 GMT

Coat

"...an imaginary pink giraffe called Cyril..."

I think you'll find that Cyril is the only competent one working there, but when this happened he was on holiday, so blantantly not his fault.

@ yeah, right 

Posted Tuesday 18th December 2007 11:05 GMT

Happy

Surely you mean a sign saying "beware of the leopard" ?

The proper term is "protectively marked" 

Posted Tuesday 18th December 2007 11:59 GMT

Black Helicopters

That document comes normally as part of a full set from the CESG library, and is issued (as far as I recall) annually or when updates occur in any of the docs. It's quite comprehensive, but the fact that it is protectively marked is quite a pain because it imposes some storage requirements if you want to do it right.

Having said that, it's not super secret AFAIK and anyone who has signed the Official Secrets Acts (OSA) should IMHO be able to see at least that part, or maybe there's a way in which CESG can create an extract for junior servants to read. Maybe they have, I unsubscribed from it years ago so my knowledge may be a bit dated.

There is, however, a snag with this library which may explain why it's not that well read.

It's distributed ..

.. on CD :-).

Official (SECRET)Data handling Manual 

Posted Wednesday 19th December 2007 15:50 GMT

Boffin

Rember it is on an Oficial File so it is an Official Scecret.So therfore not to be divulged to any one that actualy needs to use it:p

Don’t Miss