Deloitte flags risks of UK child database
PrintNo such thing as a secure database
Posted in Public Sector, 22nd February 2008 09:32 GMT
Free whitepaper – Dell PowerEdge server benchmarks
A security review by Deloitte of one of the UK government's child databases - ContactPoint, which will contain an entry for every English child under 18 - has found it is generally secure. With some provisos.
Deloitte makes a timely reminder to a government convinced that securing databases is simply a technical problem: "Risk can only be managed not eliminated, and therefore there will always be a risk of data security incidents occurring."
More positively, the review found information security had "been ingrained" within people, processes, policy development, requirements definition and architecture.
But there were some concerns.
Deloitte recomends more control over access to data by administrators and programmers.
That processes are defined for the safe destruction of physical and electronic media and that clear security advice is given to all helpdesk staff on the production system.
Kevin Brennan, the under-secretary of state for children, young people and families, accepted the report's findings and said the government "will address them". ®
Free whitepaper – Selecting an Industry-Standard Metric for Data Center Efficiency
Analyst Keynote: The Register Agile Data Center Summit
Managing desktop software for fun and profit
Analyst Keynote: The Register Agile Data Center Summit
Enabling the Agile Data Center
Google Spanner — instamatic redundancy for 10 million servers?
Early adopters bloodied by Ubuntu's Karmic Koala
Fedora 12 polishes Linux for netbooks
Sign up, sign up for The Register IT security newsletter