Request for information surrounding data loss

The request was partially successful.

Dear Kent County Council,

I would like to know to what extent you have implemented data encryption and cyber insurance policies and losses that you have incurred specifically covering the following;

1. How many laptops, mobile, tablet or USB devices have been lost or stolen from your organisation in the past year (Sept 2021-Sept 2022)? Please specify numbers of each device type.

2. How many of these devices were encrypted? Please specify numbers of each device type.

3. Have you had to disclose or inform the ICO of a data breach as a result of any of these devices being lost or stolen in the past year (Sept 2021-Sept 2022)?

4. Have you had to disclose or inform the ICO of a data breach for any other reason e.g., cloud breach, supply chain breach...

5. How many data breaches (information has been lost, stolen or taken from a system without the knowledge or authorisation of the department/organisation) have you experienced within your organisation (department) within the past year (Sept 2021-Sept 2022)?

6. Do you have an existing cyber insurance policy in place, and how long have you had it? If not, do you plan to invest in cyber insurance in the coming year?

7. Have you had to claim on an existing cyber insurance policy in the past year (Sept 2021-Sept 2022) - if so, what was the reason for this i.e. ransomware attack, phishing scam...

Yours faithfully,

Alicia Broadest

 

Information request
Our reference: 33774757

══════════════════════════════════════════════════════════════════════════

Dear Ms Broadest
   
Thank you for your email which we received on 6 December 2022.
 
Kent County Council (KCC) acknowledges your request for information, which
we will consider under the relevant legislation (Freedom of Information
Act 2000 and/or Environmental Information Regulations 2004).
 
Assuming KCC holds this information, we will endeavour to supply the data
to you as soon as possible but no later than 6 January 2023 (20 working
days from date of receipt).
 
We will advise you as soon as possible if we do not hold this information
or if there are exemptions to be considered and/or any costs for providing
the information.
 
Please quote our reference - 33774757 in any communication regarding this
particular request.

Please see our [1]Information Rights Privacy Notice for details of how we
process your personal data.

Yours sincerely

Katy Adams
Information Access Officer
 
NOTE: Please do not edit the subject line when replying to this email.

References

Visible links
1. https://www.kent.gov.uk/about-the-counci...

5 Attachments

 

Information request
Our reference: 33774757

══════════════════════════════════════════════════════════════════════════

Dear Ms Broadest
 
Thank you for your request for information received on 6 December 2022.
 
Please find attached our response to your request.
 
Yours sincerely
 
Katy Adams 
Information Access Officer 
 
NOTE: Please do not edit the subject line when replying to this email.