Feeds

Culture of insecurity blamed for HMRC data loss

Official reports lambast UK.gov over data breaches

Choosing a cloud hosting partner with confidence

A culture of insecurity rather than mistakes by any single official has been blamed for the HMRC data loss debacle, an official inquiry is expected to report on Wednesday.

The Poynter report will highlight poor security practices at the government agency leading up to the loss of discs contained child benefit information on 25 million people in October last year.

Chancellor Alistair Darling told Parliament in November that a "junior official" had posted the encrypted discs to the National Audit Office, contrary to "strict security rules". However the report by management consultant Keiran Poynter is expected to highlight much wider problems at the agency.

Ahead of the publication of the report, net security firm Symantec said that it had implications for private business as well as government departments. According to Symantec, one in four data breaches in the UK occurs within Government departments. It reckons data breaches cost up to £47 per compromised record.

"More than 95 per cent of data loss is inadvertent or accidental. The recommendations in the Poynter Report have been given to avoid this scale of loss, accidental or otherwise, happening again. All organisations which hold customer data need to be very clear with its policies and have a very strict data loss prevention programme in place to manage and control the amount of data it holds,” said Richard Archdeacon, director of Symantec Global Security.

The Poynter report is one of four reports on government data security due out on Wednesday. The Independent Police Complaints Commission is due to report its take on the on the HMRC breach.

A separate Cabinet Office report will examine the wider issue of how government departments handle data. The report is expected to endorse moves to allow the Information Commissioner to make spot checks on government departments and agencies, the BBC reports.

Finally a Ministry of Defence investigation is expected to blame slack security practices for the loss of a laptop containing details on 600,000 potential armed forces recruits, AP adds.

The Telegraph has published a handy timeline on events surrounding the HMRC data loss scandal here.

We'll have more on the Cabinet Office report later today.®

Security for virtualized datacentres

More from The Register

next story
The 'fun-nification' of computer education – good idea?
Compulsory code schools, luvvies love it, but what about Maths and Physics?
Ex-US Navy fighter pilot MIT prof: Drones beat humans - I should know
'Missy' Cummings on UAVs, smartcars and dying from boredom
Facebook, Apple: LADIES! Why not FREEZE your EGGS? It's on the company!
No biological clockwatching when you work in Silicon Valley
Happiness economics is bollocks. Oh, UK.gov just adopted it? Er ...
Opportunity doesn't knock; it costs us instead
'Cowardly, venomous trolls' threatened with TWO-YEAR sentences for menacing posts
UK government: 'Taking a stand against a baying cyber-mob'
Sysadmin with EBOLA? Gartner's issued advice to debug your biz
Start hoarding cleaning supplies, analyst firm says, and assume your team will scatter
Doctor Who's Flatline: Cool monsters, yes, but utterly limp subplots
We know what the Doctor does, stop going on about it already
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.