Show Search Form

Search Results

registered interest	true false
date	exactly: or between: and
answering body
answering dept id
answering dept short name
answering dept sort name
hansard heading
house id
legislature	pref label
question text
tabling member constituency
tabling member printed
uin
answer	is ministerial correction true false date of answer exactly: or between: and answer text answering member constituency answering member printed grouped question UIN question first answered answering member label
tabling member	label

Search

1000229

	registered interest
	date	02/11/2018
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	hansard heading	Government Departments: Data Protection
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Minister for the Cabinet Office, how many data breaches were reported by each Government department to the Government Security Group in each of the last four years.
	tabling member constituency	Leigh
	tabling member printed	Jo Platt
	uin	187361
	answer	answer is ministerial correction date of answer 12/11/2018 answer text <p>Cabinet Office does not require central reporting of data breaches by government departments.</p><p> </p><p>The <a href="https://www.gov.uk/government/publications/the-minimum-cyber-security-standard" target="_blank">minimum cyber security standard</a> outlines the communications required by a department when there is a security incident that impacts on sensitive information or key operational services.</p><p> </p><p>The Government Security Group would be involved in the response to a category one or two</p><p>cyber security incident impacting a central government department(s), however to date an incident of this type has not occurred.</p><p> </p><p>The <a href="https://www.ncsc.gov.uk/news/annual-review-2018" target="_blank">National Cyber Security Centre’s Annual Report (2018)</a> provides the total number of incidents it has dealt with over the past year.</p> answering member constituency Aylesbury answering member printed Mr David Lidington question first answered 12/11/2018 09:37:31 answering member 15 label Biography information for Sir David Lidington
	tabling member	4673 label Biography information for Jo Platt

584015

	registered interest
	date	15/09/2016
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	hansard heading	Government Departments: Data Protection
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Minister for the Cabinet Office, what steps he plans to take to improve the clarity of advice to government departments on protecting data.
	tabling member constituency	West Bromwich East
	tabling member printed	Tom Watson
	uin	46601
	answer	answer is ministerial correction date of answer 10/10/2016 answer text <p>The Government’s <a href="https://www.gov.uk/government/publications/security-policy-framework/hmg-security-policy-framework" target="_blank">Security Policy Framework</a> has clear requirements on Information Assurance which are mandatory for departments. They include a range of measures including the <a href="https://www.gov.uk/government/publications/government-security-classifications" target="_blank">Classification Policy</a> which set out expectations of how government will protect the wide variety of information that it generates, collects, processes, stores and exchanges appropriately and effectively. As the NAO report acknowledges, the UK government is acknowledged as a world leader in this area.</p><p>However, we are conscious that these policies and structures have grown organically over time and need to keep pace with Government’s digital transformation plans. So the Cabinet Office conducted its own review of Government security in early 2016 and many of the findings are consistent with the NAO report. We are already starting to implement the recommendations in the review.</p><p>For example, we are already well underway in strengthening oversight of information security by bringing together nine separate central teams into just two. We have also appointed the Government’s first ever Chief Security Officer to bring together all disciplines of government security under central leadership. As part of this work Cabinet Office is working with GCHQ and the Government Digital Service to rationalise and clarify the guidance to departments on information security and protecting data. The National Cyber Security Centre which is due to stand up in the autumn will also play a lead role in advising departments on cyber security.</p><p>But we can and will do more and we will respond fully to this report in due course.</p> answering member constituency Ipswich answering member printed Ben Gummer grouped question UIN 46669 question first answered 10/10/2016 09:18:45 answering member 3988 label Biography information for Ben Gummer
	tabling member	1463 label Biography information for Lord Watson of Wyre Forest

584017

	registered interest
	date	15/09/2016
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	hansard heading	Government Departments: Data Protection
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Minister for the Cabinet Office, what his assessment is of the implications for the Government's policies on data protection of the findings of the NAO report, Protecting information across the government, published in September 2016.
	tabling member constituency	West Bromwich East
	tabling member printed	Tom Watson
	uin	46669
	answer	answer is ministerial correction date of answer 10/10/2016 answer text <p>The Government’s <a href="https://www.gov.uk/government/publications/security-policy-framework/hmg-security-policy-framework" target="_blank">Security Policy Framework</a> has clear requirements on Information Assurance which are mandatory for departments. They include a range of measures including the <a href="https://www.gov.uk/government/publications/government-security-classifications" target="_blank">Classification Policy</a> which set out expectations of how government will protect the wide variety of information that it generates, collects, processes, stores and exchanges appropriately and effectively. As the NAO report acknowledges, the UK government is acknowledged as a world leader in this area.</p><p>However, we are conscious that these policies and structures have grown organically over time and need to keep pace with Government’s digital transformation plans. So the Cabinet Office conducted its own review of Government security in early 2016 and many of the findings are consistent with the NAO report. We are already starting to implement the recommendations in the review.</p><p>For example, we are already well underway in strengthening oversight of information security by bringing together nine separate central teams into just two. We have also appointed the Government’s first ever Chief Security Officer to bring together all disciplines of government security under central leadership. As part of this work Cabinet Office is working with GCHQ and the Government Digital Service to rationalise and clarify the guidance to departments on information security and protecting data. The National Cyber Security Centre which is due to stand up in the autumn will also play a lead role in advising departments on cyber security.</p><p>But we can and will do more and we will respond fully to this report in due course.</p> answering member constituency Ipswich answering member printed Ben Gummer grouped question UIN 46601 question first answered 10/10/2016 09:18:45 answering member 3988 label Biography information for Ben Gummer
	tabling member	1463 label Biography information for Lord Watson of Wyre Forest

746238

	registered interest
	date	28/06/2017
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	hansard heading	Government Departments: Data Protection
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Minister for the Cabinet Office, what estimate he has made of the number of data breaches across central Government Departments in (a) 2015-16 and (b) 2016-17.
	tabling member constituency	Sheffield, Heeley
	tabling member printed	Louise Haigh
	uin	1759
	answer	answer is ministerial correction date of answer 03/07/2017 answer text <p>The Cabinet Office does not require Central Government Departments to report their personal data breaches and so does not hold this information centrally. Each department is accountable to Parliament for the protection of data that they hold. Departments formally report data breaches to the Information Commissioner’s Office where appropriate and record these breaches in their Annual Reports.</p> answering member constituency Romsey and Southampton North answering member printed Caroline Nokes question first answered 03/07/2017 15:07:08 answering member 4048 label Biography information for Caroline Nokes
	tabling member	4473 label Biography information for Louise Haigh

746485

	registered interest
	date	28/06/2017
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	hansard heading	Government Departments: Data Protection
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Minister for the Cabinet Office, whether the Government plans to implement a policy to prevent hackers from accessing and altering data used to inform government decisions.
	tabling member constituency	Newcastle upon Tyne Central
	tabling member printed	Chi Onwurah
	uin	1895
	answer	answer is ministerial correction date of answer 04/07/2017 answer text <p>The HMG Security Policy Framework sets out the mandatory expectations of how Government organisations must secure their data and other assets. This includes appropriate controls to protect against hackers and other cyber threats. These security controls are designed to safeguard the confidentiality, integrity and availability of Government data.</p> answering member constituency Romsey and Southampton North answering member printed Caroline Nokes question first answered 04/07/2017 13:34:57 answering member 4048 label Biography information for Caroline Nokes
	tabling member	4124 label Biography information for Chi Onwurah

801128

	registered interest
	date	05/12/2017
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	hansard heading	Government Departments: Data Protection
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Minister for the Cabinet Office, how many data incidents in central Government departments were (a) recorded and (b) reported to the Information Commissioner's Office in (i) 2015-16 and (ii) 2016-2017.
	tabling member constituency	Hemsworth
	tabling member printed	Jon Trickett
	uin	117687
	answer	answer is ministerial correction date of answer 12/12/2017 answer text <p>The number of data incidents recorded and reported to the Information Commissioners’ Office in central Government Departments is held by those organisations and published in their Annual Reports. It is for the individual central Government Departments to provide this information.</p> answering member constituency Romsey and Southampton North answering member printed Caroline Nokes question first answered 12/12/2017 15:55:55 answering member 4048 label Biography information for Caroline Nokes
	tabling member	410 label Biography information for Jon Trickett

836048

	registered interest
	date	02/02/2018
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	hansard heading	Government Departments: Data Protection
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Minister for the Cabinet Office, what steps his Department is taking to counter leaks of sensitive material across Whitehall Departments.
	tabling member constituency	Southport
	tabling member printed	Damien Moore
	uin	126403
	answer	answer is ministerial correction date of answer 19/03/2018 answer text <p>It has been the policy of successive Governments not to comment on specific security controls.</p><p> </p><p>Guidance is set for Departments on the protection of all Government assets within the Security Policy Framework. It is then up to each Department to have policies and procedures in place.</p><p> </p><p>Leaks of any Government information or material are not acceptable and the Government takes such incidents very seriously.</p> answering member constituency Hertsmere answering member printed Oliver Dowden question first answered 19/03/2018 16:56:09 answering member 4441 label Biography information for Oliver Dowden
	tabling member	4669 label Biography information for Damien Moore

997215

	registered interest
	date	29/10/2018
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	hansard heading	Government Departments: Data Protection
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Minister for the Cabinet Office, how many data breaches were recorded by each government department in each of the last four years.
	tabling member constituency	Leigh
	tabling member printed	Jo Platt
	uin	185107
	answer	answer is ministerial correction date of answer 01/11/2018 answer text <p>The Cabinet Office does not require central Government Departments to report their personal data breaches and so does not hold this information centrally.</p><p> </p><p>In June of 2018 the Minimum Cyber Security Standards were published requiring each department to have a plan to reporting data breaches. It states that</p><p><em> </em></p><p><em>Departments shall have communication plans in the event of an incident which includes notifying (for example) the relevant supervisory body, senior accountable individuals, the Departmental press office, the National Cyber Security Centre (NCSC), Government Security Group (Cabinet Office), the Information Commissioner’s Office (ICO) or law enforcement as applicable (not exhaustive).</em></p><p> </p> answering member constituency Aylesbury answering member printed Mr David Lidington question first answered 01/11/2018 12:16:49 answering member 15 label Biography information for Sir David Lidington
	tabling member	4673 label Biography information for Jo Platt

997216

	registered interest
	date	29/10/2018
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	hansard heading	Government Departments: Data Protection
	house id	1
	legislature	25259 pref label House of Commons
	question text	To ask the Minister for the Cabinet Office, what recent estimate he has made of the number of separate teams or organisations throughout government tasked with protecting information or monitoring data breaches.
	tabling member constituency	Leigh
	tabling member printed	Jo Platt
	uin	185108
	answer	answer is ministerial correction date of answer 01/11/2018 answer text <p>The Cabinet Office does not record centrally the number of separate teams or organisations tasked with protecting information or monitoring data breaches. However, the Government Chief Security Officer (GSCO) is ensuring that each department has a Senior Security Advisor responsible for advising their boards on security risks and appropriate steps to mitigate them.</p> answering member constituency Aylesbury answering member printed Mr David Lidington question first answered 01/11/2018 15:38:42 answering member 15 label Biography information for Sir David Lidington
	tabling member	4673 label Biography information for Jo Platt