Feeds

IPS's double IT has risks, says commissioner

Doing a good job nevertheless, he controversially adds

Secure remote control for conventional and virtual desktops

Identity commissioner Sir Joseph Pilling has expressed concerns about the Identity and Passport Service's two-stage approach to its core technology.

"The IPS have gone for what they call a tactical and a strategic solution to the IT demands of running an ID scheme in this country," he told the Security Document World conference in London on 8 February 2010. One system has been put in place for the small-scale launch of the scheme, but another will be introduced when it is expanded by forcing passport applicants to enrol.

"I am not sure whether if you have two schemes in short order you double, treble or quadruple the risk or even more than that, but I am pretty clear that it is a quite ambitious approach to take, and I am particularly intending to take an interest in the transition from the tactical to the strategic," said Sir Joseph.

Having seen the identity card enrolment process first hand, he added he was not satisfied that all the best possible standards are being applied and that he intended to keep his attention focused on this.

However, Sir Joseph said that IPS is doing a good job in looking after data. "It is not one of those bodies in the public or private sector who have shoved millions of unencrypted records out into the public domain, unintentionally, carelessly or as the victim of some malevolent member of staff or consultant," he said.

He said he will take a detached view of the scheme: "My emphasis is independence, independence and independence. But I am not only independent of the government, I am also independent of the opposition, whether they become the next government in a few weeks time or not."

He reminded his audience of security specialists that after a general election, it could be that the UK will no longer have identity cards for British nationals. The Conservatives have pledged to scrap the scheme.

Kable's GC weekly is a free email newsletter covering the latest news and analysis of public sector technology. To register click here.

Secure remote control for conventional and virtual desktops

More from The Register

next story
Facebook pays INFINITELY MORE UK corp tax than in 2012
Thanks for the £3k, Zuck. Doh! you're IN CREDIT. Guess not
Big Content outs piracy hotbeds: São Paulo, Beijing ... TORONTO?
MPAA calls Canadians a bunch of bootlegging movie thieves
Google Glassholes are UNDATEABLE – HP exec
You need an emotional connection, says touchy-feely MD... We can do that
YARR! Pirates walk the plank: DMCA magnets sink in Google results
Spaffing copyrighted stuff over the web? No search ranking for you
UK.gov pushes for SWIFT ACTION against nuisance calls, threatens £500k fines
DCMS seeks lowering of legal threshold to fight rogue firms
Just don't blame Bono! Apple iTunes music sales PLUMMET
Cupertino revenue hit by cheapo downloads, says report
Hungary's internet tax cannot be allowed to set a precedent, says EC
More protests planned against giga-tariff for Tuesday evening
US court SHUTS DOWN 'scammers posing as Microsoft, Facebook support staff'
Netizens allegedly duped into paying for bogus tech advice
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
How to simplify SSL certificate management
Simple steps to take control of SSL certificates across the enterprise, and recommendations centralizing certificate management throughout their lifecycle.