Date post: | 26-Dec-2015 |
Category: |
Documents |
Upload: | ilene-long |
View: | 213 times |
Download: | 0 times |
1
Algemene Rekenkamer | Postbus 20015 | 2500 EA Den Haag
Data security and positions with access to confidentialinformation
2
Agenda
• About the audit• Audit findings• Control space of E-Government:
• Report• Cases
Data security and positions with access to confidential information| February 18th 2013
3
About the audit
• Part of the 2011 audit into the state of central government accounts
• We performed audits at all the ministries and one departmental agency into Information Security ( IS):• Quality of data protection policy; • Protection of data systems.
• We examined Positions with access to Confidential Information at all the ministries. ( PCI)
• Audit start: October 2011• Audit publication: May 2012
Data security and positions with access to confidential information| February 18th 2013
4
Audit findings IS - Quality of data protection policy
• Most ministries and departmental agencies score badly in the following two respects:• It is not clear who is responsible for which data systems and
data chains.• No regular reviews of data protection policy have been
planned or performed.
Data security and positions with access to confidential information| February 18th 2013
5
Audit findings IS - Protection of data systems
• Poor scores in the two following areas in particular:• No clear picture of the security risks associated with data
systems;• The overall package of reliability requirements and security
measures is not reviewed at regular intervals.
Data security and positions with access to confidential information| February 18th 2013
8
Control space of E-Government – The form
Data security and positions with access to confidential information| February 18th 2013
9
Control space of E-Government – Case IS: Quality of data protection policy
Data security and positions with access to confidential information| February 18th 2013
10
Control space of E-Government – Case PCI: Positions with access to confidential information
Data security and positions with access to confidential information| February 18th 2013
11
Control space of E-Government – Headline
Data security and positions with access to confidential information| February 18th 2013
12
Let’s see how this looks like….
Data security and positions with access to confidential information| February 18th 2013