Show Search Form

Search Results

registered interest	true false
date	exactly: or between: and
answering body
answering dept id
answering dept short name
answering dept sort name
hansard heading
house id
legislature	pref label
question text
tabling member printed
uin
answer	is ministerial correction true false date of answer exactly: or between: and answer text answering member printed grouped question UIN question first answered answering member label
tabling member	label

Search

1183430

	registered interest
	date	09/03/2020
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	hansard heading	Government Departments: Cybersecurity
	house id	2
	legislature	25277 pref label House of Lords
	question text	To ask Her Majesty's Government how many Government departments meet, or exceed, the current minimum cyber security standards set out for Government departments.
	tabling member printed	Lord Harris of Haringey
	uin	HL2333
	answer	answer is ministerial correction date of answer 23/03/2020 answer text <p>The Minimum Cyber Security Standard for Government was introduced in 2018, drawing on the expert technical advice of the National Cyber Security Centre (NCSC).</p><p>The Government Security Group is working with departments, including NCSC and Government Digital Service, to understand what changes, if any, need to be made to the Minimum Cyber Security Standard. This review is already underway and is intended to be an annual activity with updated standards published on GOV.UK accordingly. Over time, the measures will be incremented to continually ‘raise the bar’ to keep pace with a changing threat and ensure appropriate management of risk.</p><p> </p> answering member printed Lord True grouped question UIN HL2331 HL2332 question first answered 23/03/2020 16:51:52 answering member 4200 label Biography information for Lord True
	tabling member	2671 label Biography information for Lord Harris of Haringey

1146304

	registered interest
	date	25/09/2019
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	hansard heading	Government Departments: Cybercrime
	house id	2
	legislature	25277 pref label House of Lords
	question text	To ask Her Majesty's Government how many cyber attacks against government departments have involved the misuse of privileged access credentials.
	tabling member printed	Lord Harris of Haringey
	uin	HL17799
	answer	answer is ministerial correction date of answer 07/10/2019 answer text <p>Government departments and Critical National Infrastructure organisations are responsible for managing their own cyber risk effectively.</p><p>The high level of importance of privileged access management in cyber security is recognised by the National Cyber Security Centre (NCSC), which is the UK’s national technical authority for cyber security.</p><p>For Government, it is documented in the minimum cyber security standard in items 5 and 7. For Critical National Infrastructure (CNI) it is documented in NCSC’s Network and Information Systems guidance in section B2, and there are specific assessment criteria laid out in section B2.c of the Cyber Assessment Framework for use by cyber security regulators.</p><p>For wider industry sectors and Small and Medium Enterprises, best practice is contained in the NCSC Board Kit and 10 Steps to Cyber Security.</p><p>The Cabinet Office does not require central Government Departments to report all cyber incidents involving the misuse of privileged access credentials and so does not hold this information centrally.</p><p>However, The minimum cyber security standard outlines the communications required by a department when there is a security incident that impacts on sensitive information or key operational services. Therefore departments will only be expected to inform the Cabinet Office of an incident involving the misuse of privileged access credentials that met these criteria.</p><p> </p> answering member printed The Earl of Courtown grouped question UIN HL17797 question first answered 07/10/2019 16:09:03 answering member 3359 label Biography information for The Earl of Courtown
	tabling member	2671 label Biography information for Lord Harris of Haringey

1056898

	registered interest
	date	07/02/2019
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	hansard heading	Electronic Government: Proof of Identity
	house id	2
	legislature	25277 pref label House of Lords
	question text	To ask Her Majesty's Government how many people have signed up to use GOV.UK Verify; and how many use each identity provider.
	tabling member printed	Lord Harris of Haringey
	uin	HL13552
	answer	answer is ministerial correction date of answer 15/02/2019 answer text <p>The number of GOV.UK Verify accounts (historic and current) is published on the GOV.UK website and is regularly updated. As of 10 February 2019, there were 3,617,585 GOV.UK Verify user accounts. Details of the number of GOV.UK Verify user accounts with each identity provider is commercially sensitive information and cannot be released.</p> answering member printed Lord Young of Cookham question first answered 15/02/2019 12:46:37 answering member 57 label Biography information for Lord Young of Cookham
	tabling member	2671 label Biography information for Lord Harris of Haringey

1146302

	registered interest
	date	25/09/2019
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	hansard heading	Government Departments and Infrastructure: Cybersecurity
	house id	2
	legislature	25277 pref label House of Lords
	question text	To ask Her Majesty's Government what assessment they have made of the role of privileged access management in protecting the cyber security of (1) government departments, and (2) critical national infrastructure.
	tabling member printed	Lord Harris of Haringey
	uin	HL17797
	answer	answer is ministerial correction date of answer 07/10/2019 answer text <p>Government departments and Critical National Infrastructure organisations are responsible for managing their own cyber risk effectively.</p><p>The high level of importance of privileged access management in cyber security is recognised by the National Cyber Security Centre (NCSC), which is the UK’s national technical authority for cyber security.</p><p>For Government, it is documented in the minimum cyber security standard in items 5 and 7. For Critical National Infrastructure (CNI) it is documented in NCSC’s Network and Information Systems guidance in section B2, and there are specific assessment criteria laid out in section B2.c of the Cyber Assessment Framework for use by cyber security regulators.</p><p>For wider industry sectors and Small and Medium Enterprises, best practice is contained in the NCSC Board Kit and 10 Steps to Cyber Security.</p><p>The Cabinet Office does not require central Government Departments to report all cyber incidents involving the misuse of privileged access credentials and so does not hold this information centrally.</p><p>However, The minimum cyber security standard outlines the communications required by a department when there is a security incident that impacts on sensitive information or key operational services. Therefore departments will only be expected to inform the Cabinet Office of an incident involving the misuse of privileged access credentials that met these criteria.</p><p> </p> answering member printed The Earl of Courtown grouped question UIN HL17799 question first answered 07/10/2019 16:09:03 answering member 3359 label Biography information for The Earl of Courtown
	tabling member	2671 label Biography information for Lord Harris of Haringey

1187929

	registered interest
	date	25/03/2020
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	hansard heading	Schools: Coronavirus
	house id	2
	legislature	25277 pref label House of Lords
	question text	To ask Her Majesty's Government what consideration they have given to including (1) building maintenance engineers, (2) personnel supporting the critical lifeline utilities, and (3) non-police security staff, in the list of essential staff whose children can continue to be admitted to schools during the COVID-19 pandemic.
	tabling member printed	Lord Harris of Haringey
	uin	HL2943
	answer	answer is ministerial correction date of answer 08/04/2020 answer text <p>The position remains, as outlined on <a href="http://gov.uk/" target="_blank">gov.uk</a>, that everyone who can work from home should do so.</p><p>Where that is not possible, people should go into work where it is safe and they are not symptomatic, isolating or shielding. Relevant guidance including from PHE should be followed.</p><p>In terms of the provision of education for certain workers, it is already the case that in certain cases the staff listed above could be eligible as long as &quot;their specific role is necessary for the continuation of this essential public service&quot;. This is set out on <a href="https://www.gov.uk/government/publications/coronavirus-covid-19-maintaining-educational-provision/guidance-for-schools-colleges-and-local-authorities-on-maintaining-educational-provision" target="_blank">gov.uk</a>.</p><p>The Government has placed restrictions on the operations of certain businesses as part of the strategy of enhanced social distancing. Separate guidance has been published on this and is also available on <a href="http://gov.uk/" target="_blank">gov.uk</a>.</p><p> </p> answering member printed Lord True question first answered 08/04/2020 15:20:42 answering member 4200 label Biography information for Lord True
	tabling member	2671 label Biography information for Lord Harris of Haringey

1171803

	registered interest
	date	20/01/2020
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	house id	2
	legislature	25277 pref label House of Lords
	question text	To ask Her Majesty's Government what length of time they consider reasonable for contractors providing specialist information and advisory services to prepare for service delivery following the award of a contract.
	tabling member printed	Lord Harris of Haringey
	uin	HL565
	answer	answer is ministerial correction date of answer 29/01/2020 answer text <p>The length of time that a contractor has to prepare for service delivery following the award of a contract is dependent on the terms of the specific contract.</p> answering member printed Earl Howe question first answered 29/01/2020 17:12:08 answering member 2000 label Biography information for Earl Howe
	tabling member	2671 label Biography information for Lord Harris of Haringey

1146303

	registered interest
	date	25/09/2019
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	hansard heading	Government Departments: Supply Chains
	house id	2
	legislature	25277 pref label House of Lords
	question text	To ask Her Majesty's Government what steps they are taking to ensure that best practice in evaluating the cyber security of supply chains is being shared across government departments.
	tabling member printed	Lord Harris of Haringey
	uin	HL17798
	answer	answer is ministerial correction date of answer 08/10/2019 answer text <p>The government takes supply chain security seriously. The requirement to understand and manage cyber security issues arising from a department’s supply chain is detailed in Item 1 of the Minimum Cyber Security Standard.</p><p>The use of Cyber Essentials in government procurement is set out in Policy Procurement Notice 09/14. Use of Cyber Essentials demonstrates a supplier has taken necessary steps to obtain an appropriate level of cyber security.</p><p>Best practice is promoted through the advice contained in the National Cyber Security Centre and Centre for the Protection of National Infrastructure’s Supply Chain Security guidance.</p> answering member printed The Earl of Courtown question first answered 08/10/2019 16:58:02 answering member 3359 label Biography information for The Earl of Courtown
	tabling member	2671 label Biography information for Lord Harris of Haringey

1022878

	registered interest
	date	10/12/2018
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	hansard heading	Telecommunications: EU Law
	house id	2
	legislature	25277 pref label House of Lords
	question text	To ask Her Majesty's Government what steps they are taking to implement Article 110 of the European Electronic Communications Code; and which (1) department, and (2) minister is responsible for leading on its implementation.
	tabling member printed	Lord Harris of Haringey
	uin	HL12144
	answer	answer is ministerial correction date of answer 20/12/2018 answer text <p>The Department for Digital, Culture, Media and Sport (DCMS) is the lead department in relation to implementing the European Electronic Communications Code as a whole. Article 110 refers to a “Public warning system”. As a number of organisations have responsibility for warning and informing the public, the Minister for Implementation has asked the Cabinet Office to coordinate a review to establish whether there is a case for a national mobile alerting scheme, in addition to the systems already in place. Further information about the implementation of the Code and ministerial responsibilities will be made available in due course.</p> answering member printed Lord Young of Cookham question first answered 20/12/2018 14:37:29 answering member 57 label Biography information for Lord Young of Cookham
	tabling member	2671 label Biography information for Lord Harris of Haringey

1183428

	registered interest
	date	09/03/2020
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	hansard heading	Government Departments: Cybersecurity
	house id	2
	legislature	25277 pref label House of Lords
	question text	To ask Her Majesty's Government when they intend to review the minimum cyber security standards for Government departments.
	tabling member printed	Lord Harris of Haringey
	uin	HL2331
	answer	answer is ministerial correction date of answer 23/03/2020 answer text <p>The Minimum Cyber Security Standard for Government was introduced in 2018, drawing on the expert technical advice of the National Cyber Security Centre (NCSC).</p><p>The Government Security Group is working with departments, including NCSC and Government Digital Service, to understand what changes, if any, need to be made to the Minimum Cyber Security Standard. This review is already underway and is intended to be an annual activity with updated standards published on GOV.UK accordingly. Over time, the measures will be incremented to continually ‘raise the bar’ to keep pace with a changing threat and ensure appropriate management of risk.</p><p> </p> answering member printed Lord True grouped question UIN HL2332 HL2333 question first answered 23/03/2020 16:51:52 answering member 4200 label Biography information for Lord True
	tabling member	2671 label Biography information for Lord Harris of Haringey

1183429

	registered interest
	date	09/03/2020
	answering body	Cabinet Office
	answering dept id	53
	answering dept short name	Cabinet Office
	answering dept sort name	Cabinet Office
	hansard heading	Government Departments: Cybersecurity
	house id	2
	legislature	25277 pref label House of Lords
	question text	To ask Her Majesty's Government whether a risk assessment has been carried out to assess the implications of not reviewing the minimum cyber security standards for Government departments.
	tabling member printed	Lord Harris of Haringey
	uin	HL2332
	answer	answer is ministerial correction date of answer 23/03/2020 answer text <p>The Minimum Cyber Security Standard for Government was introduced in 2018, drawing on the expert technical advice of the National Cyber Security Centre (NCSC).</p><p>The Government Security Group is working with departments, including NCSC and Government Digital Service, to understand what changes, if any, need to be made to the Minimum Cyber Security Standard. This review is already underway and is intended to be an annual activity with updated standards published on GOV.UK accordingly. Over time, the measures will be incremented to continually ‘raise the bar’ to keep pace with a changing threat and ensure appropriate management of risk.</p><p> </p> answering member printed Lord True grouped question UIN HL2331 HL2333 question first answered 23/03/2020 16:51:52 answering member 4200 label Biography information for Lord True
	tabling member	2671 label Biography information for Lord Harris of Haringey