Risk assessment - malicious access of UC records
Dear Department for Work and Pensions,
Please provide a copy of a risk assessment (possibly titled 'security risk assessment') which identifies risks associated with deliberate malicious access of UC claimant records by people working on the physical or technical DWP estate. If possible please include a record of the controls identified to mitigate the risk.
Yours faithfully,
Owen Stevens
This is an automated confirmation that your request for information has
been received by the DWP FOI mailbox.
If your email is a valid Freedom of Information request, as per Section 8
of the FOI Act 2000, you can normally expect a response within 20 working
days.
Please note that email FOI responses will be issued from
[1][email address]
We recommend that you add this address to your email contacts otherwise
the response may be treated as Spam or Junk mail.
Should you have any further queries in connection with this request please
contact us.
Information on the Department for Work and Pensions can be accessed on
gov.uk here - [2]http://www.gov.uk/dwp
References
Visible links
1. mailto:[email address]
2. http://www.gov.uk/dwp
This is an automated confirmation that your request for information has
been received by the DWP FOI mailbox.
If your email is a valid Freedom of Information request, as per Section 8
of the FOI Act 2000, you can normally expect a response within 20 working
days.
Please note that email FOI responses will be issued from
[1][email address]
We recommend that you add this address to your email contacts otherwise
the response may be treated as Spam or Junk mail.
Should you have any further queries in connection with this request please
contact us.
Information on the Department for Work and Pensions can be accessed on
gov.uk here - [2]http://www.gov.uk/dwp
References
Visible links
1. mailto:[email address]
2. http://www.gov.uk/dwp
Dear Owen Stevens,
I am writing in response to your request for information, received 6th
January.
Yours sincerely,
DWP Central FoI Team
Dear Department for Work and Pensions,
Please pass this on to the person who conducts Freedom of Information reviews.
I am writing to request an internal review of Department for Work and Pensions's handling of my FOI request 'Risk assessment - malicious access of UC records'.
I believe that the risks could be addressed by redacting the document. Risks identified by DWP and controls to mitigate risks have been made publicly available in the past (see, for example, paras.8-15 https://www.supremecourt.uk/cases/uksc-2... for an example of controls to mitigate risk being published and see https://ico.org.uk/media/action-weve-tak... for an example of DWP identifying the risks associated with the LinkedIn profiles of their staff).
Publication would help to prevent crime by enabling victims (especially people who have been subject to domestic abuse) to take up the protections available.
A full history of my FOI request and all correspondence is available on the Internet at this address: https://www.whatdotheyknow.com/request/r...
Yours faithfully,
Owen Stevens
This is an automated confirmation that your request for information has
been received by the DWP FOI mailbox.
If your email is a valid Freedom of Information request, as per Section 8
of the FOI Act 2000, you can normally expect a response within 20 working
days.
Please note that email FOI responses will be issued from
[1][email address]
We recommend that you add this address to your email contacts otherwise
the response may be treated as Spam or Junk mail.
Should you have any further queries in connection with this request please
contact us.
Information on the Department for Work and Pensions can be accessed on
gov.uk here - [2]http://www.gov.uk/dwp
References
Visible links
1. mailto:[email address]
2. http://www.gov.uk/dwp
This is an automated confirmation that your request for information has
been received by the DWP FOI mailbox.
If your email is a valid Freedom of Information request, as per Section 8
of the FOI Act 2000, you can normally expect a response within 20 working
days.
Please note that email FOI responses will be issued from
[1][email address]
We recommend that you add this address to your email contacts otherwise
the response may be treated as Spam or Junk mail.
Should you have any further queries in connection with this request please
contact us.
Information on the Department for Work and Pensions can be accessed on
gov.uk here - [2]http://www.gov.uk/dwp
References
Visible links
1. mailto:[email address]
2. http://www.gov.uk/dwp
Dear Owen Stevens,
I am writing in response to your request for information, received 17th
January.
Yours sincerely,
DWP Central FoI Team
Owen Stevens left an annotation ()
"e. changes are required to how the user access control processes for Universal Credit processing operate to address concerns around the significant number of user accounts remaining with Advanced Access privileges, to reduce the number of Advanced Accounts to an acceptable level
f. control improvements are required over the treatment of Special Customer Records within the Department to ensure that the records of vulnerable customers are properly protected to safeguard those customers"
https://assets.publishing.service.gov.uk...
Dear Mr Stevens
Please see attached letter in regards to your request.
Kind regards
DWP Central FoI Team
We work to defend the right to FOI for everyone
Help us protect your right to hold public authorities to account. Donate and support our work.
Donate Now
Owen Stevens left an annotation ()
Have complained to ICO