Feeds

Culture of insecurity blamed for HMRC data loss

Official reports lambast UK.gov over data breaches

Secure remote control for conventional and virtual desktops

A culture of insecurity rather than mistakes by any single official has been blamed for the HMRC data loss debacle, an official inquiry is expected to report on Wednesday.

The Poynter report will highlight poor security practices at the government agency leading up to the loss of discs contained child benefit information on 25 million people in October last year.

Chancellor Alistair Darling told Parliament in November that a "junior official" had posted the encrypted discs to the National Audit Office, contrary to "strict security rules". However the report by management consultant Keiran Poynter is expected to highlight much wider problems at the agency.

Ahead of the publication of the report, net security firm Symantec said that it had implications for private business as well as government departments. According to Symantec, one in four data breaches in the UK occurs within Government departments. It reckons data breaches cost up to £47 per compromised record.

"More than 95 per cent of data loss is inadvertent or accidental. The recommendations in the Poynter Report have been given to avoid this scale of loss, accidental or otherwise, happening again. All organisations which hold customer data need to be very clear with its policies and have a very strict data loss prevention programme in place to manage and control the amount of data it holds,” said Richard Archdeacon, director of Symantec Global Security.

The Poynter report is one of four reports on government data security due out on Wednesday. The Independent Police Complaints Commission is due to report its take on the on the HMRC breach.

A separate Cabinet Office report will examine the wider issue of how government departments handle data. The report is expected to endorse moves to allow the Information Commissioner to make spot checks on government departments and agencies, the BBC reports.

Finally a Ministry of Defence investigation is expected to blame slack security practices for the loss of a laptop containing details on 600,000 potential armed forces recruits, AP adds.

The Telegraph has published a handy timeline on events surrounding the HMRC data loss scandal here.

We'll have more on the Cabinet Office report later today.®

Intelligent flash storage arrays

More from The Register

next story
Scrapping the Human Rights Act: What about privacy and freedom of expression?
Justice minister's attack to destroy ability to challenge state
WHY did Sunday Mirror stoop to slurping selfies for smut sting?
Tabloid splashes, MP resigns - but there's a BIG copyright issue here
Google hits back at 'Dear Rupert' over search dominance claims
Choc Factory sniffs: 'We're not pirate-lovers - also, you publish The Sun'
EU to accuse Ireland of giving Apple an overly peachy tax deal – report
Probe expected to say single-digit rate was unlawful
Inequality increasing? BOLLOCKS! You heard me: 'Screw the 1%'
There's morality and then there's economics ...
Hey Brit taxpayers. You just spent £4m on Central London ‘innovation playground’
Catapult me a Mojito, I feel an Digital Innovation coming on
While you queued for an iPhone 6, Apple's Cook sold shares worth $35m
Right before the stock took a 3.8% dive amid bent and broken mobe drama
EU probes Google’s Android omerta again: Talk now, or else
Spill those Android secrets, or we’ll fine you
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.