Ministry boss: It may be our fault
The boss of the ministry at the centre of the Winz security flaw has signalled his ministry may be at fault for not responding adequately to warnings.
Wellington freelance journalist Keith Ng was able to access thousands of files on ministry servers from the kiosks in a Wellington Work and Income office.
Social Development Ministry chief executive Brendan Boyle said this morning MSD had received a report from Dimension Data in April 2011, which identified flaws in its system.
He said they will ask auditing firm Deloitte to determine what they did to follow up the report's recommendations and whether the response was adequate.
"Since yesterday afternoon I have received further information that means I am not confident that we took the right actions."
Deloitte has been appointed to review the ministry's computer security, after the breach in its Work and Income kiosks was identified on Sunday.
Boyle said the review would be a two-step process. The first will deal with the immediate issue regarding the security of the public kiosks.
The kiosks were shut on Sunday night after it was revealed the Social Development Ministry's computer system could be accessed through them.
The second will involve a broader look at security across all the ministry's IT systems.
State services minister Jonathan Coleman says he considering a wider inquiry into public service computer systems following the WINZ security breach.
Coleman said he is working on terms of reference with state services commissioner Iain Rennie and government chief information officer Colin MacDonald.
The Dominion Post