Sweeping MSD privacy review unveiled

Last updated 14:18 17/10/2012
msd
KENT BLECHYNDEN/Fairfax NZ

FACING UP:Ministry of Social Development chief executive Brendan Boyle, left, and Social Development Minister Paula Bennett.

Relevant offers

Politics

Beggars reveal what life is like on the street Fair trade pants hard to come by for Oxfam trailwalkers Good times on the water, political storm to come MPs' hidden talents: Statistics Minister Mark Mitchell has a handle on police dogs North Taranaki iwi welcomes first Government Minister in almost 100 years Green lawyer hopes to be first refugee to win a seat in Parliament MPs' hidden talents: Kris Faafoi turns to guitar for 'a bit of an escape' The truth about inequality in New Zealand Labour, Greens team up for joint 'state of the nation' event in Auckland Matt Lawrey competes against Nick Smith as Green Party candidate for Nelson MP

A review of the massive security breach of Ministry of Social Development's computer system will look at how the breach occurred as well as assessing security of the department's wider information systems.

MSD chief executive Brendan Boyle called for the investigation after it was revealed public kiosks in Work and Income offices had provided a gateway to computer servers containing detailed and private information.

Terms of reference for the review, to be conducted by Deloitte, were released today.

As well as considering what happened and why in relation to the kiosks, the review team will also look at the security of MSD's wider information systems and will make recommendations about what action needs to be taken to restore public confidence.

Boyle said work had already begun.

"The security breach is being reviewed separately to determine if any individual's privacy has been interfered with. We will consult with the Privacy Commissioner.''

He understood the public had many questions and he wanted to have assurances that MSD had the best possible systems in place, he said.

"We take seriously our responsibility to protect the privacy of clients. It's unacceptable that this breach happened and I expect this investigation to get to the bottom of how it occurred.''

Deloitte chairman Murray Jack will head the review. A steering group, including representatives from the offices of the Privacy Commissioner and Government Chief Information Officer, will provide independent oversight.

Boyle said the first part of the review would look at the circumstances of the kiosk security breach, including the development of the kiosks and any testing done on them.

It will also consider MSD's response to any security issues identified.

An independent evaluation of the kiosks by IT firm Dimension Data highlight problems with the system over a year ago but no action was taken.

Issues with the kiosks were also raised by a beneficiary advocate.

The second part of the review will look at MSD's wider polices, governance and culture around information system security.

The first part will be completed within two weeks and a deadline for part two will then be established.

The reports will be made public.

Government Chief Information Officer Colin McDonald is also conducting a separate review of all state sector information systems that have a public interface.

Ad Feedback

- Stuff

Comments

Special offers
Opinion poll

Should the speed limit be raised to 110kmh on some roads?

Yes

No

Vote Result

Related story: 110kmh limit moves closer

Featured Promotions

Sponsored Content