| Database holding details of every child in England 'can never be secure' LAURA CLARK A massive computer database listing every child in England will never be secure, an official review declared yesterday. The independent study concluded the planned new £224million ContactPoint system will always face the threat of security breaches. The warning from consultants Deloitte and Touche prompted fresh demands on ministers to halt the "intrusive" database containing the address, medical and school details of all 11 million under-18s. Ministers called in Deloitte to review security arrangements for the register in the wake of the lost computer discs scandal that hit HM Revenue and Customs last November.
Among a series of recommendations, the review called for "further controls" to be introduced over "access to data" on the controversial system. But it made clear it would never be free from the risk of security problems. The database will be made available to an estimated 330,000 vetted users, including fire and rescue staff as well as head teachers, doctors and social service workers. The Deloitte report said: "It should be noted that risk can only be managed, not eliminated, and therefore there will always be a risk of data security incidents occurring. "What is important is that all practical steps to reduce the risk of incidents occurring are taken and, when an incident occurs, that it is handled and managed effectively." The report identified "a significant risk" to the security of ContactPoint arising from the security procedures of local councils and other organisations accessing the database. The Government has not fully updated its risk assessment for ContactPoint since 2004 and should now carry out regular and ongoing risk assessments, it said. The report also found "a number of minor security failings" over some other aspects of the system. On occasion IT helpdesk staff failed to follow best practice security procedures, highlighting the need for better training.
|
|||||