DWP Email Security & Classifications Policies

The request was partially successful.

Dear Department for Work and Pensions,

I am writing to respectfully make a formal request in accordance with the Freedom of Information Act 2000.

The privacy of emails sent via the @dwp.gov.uk domain is at risk. This domain does not appear to have MTA-STS configured. This means that email privacy (using TLS) is vulnerable to downgrade, allowing an attacker to read the contents of emails.

My request is as follows:-

1. Please can the department confirm why it has opted not to use MTA-STS as a potential CySec safeguard when communicating via email on the @dwp.gov.uk domain name?

2. Please can the department provide disclosure of its email security classifications policy.

3. Please can the department provide disclosure of the number of security incident reports made internally and/or externally which relate to concerns surrounding email security between the period May 2018 - May 2022.

If I am able to provide any further information in support of this request, please do not hesitate to contact me.

Yours faithfully,

Ryan Jarvis

DWP freedom-of-information-requests, Department for Work and Pensions

This is an automated confirmation that your request for information has
been received by the DWP FOI mailbox.
 
If your email is a valid Freedom of Information request, as per Section 8
of the FOI Act 2000, you can normally expect a response within 20 working
days.
 
Please note that email FOI responses will be issued from
[1][email address]
 
We recommend that you add this address to your email contacts otherwise
the response may be treated as Spam or Junk mail.  
 
Should you have any further queries in connection with this request please
contact us.
 
Information on the Department for Work and Pensions can be accessed on
gov.uk here - [2]http://www.gov.uk/dwp
 
 

show quoted sections

References

Visible links
1. mailto:[email address]
2. http://www.gov.uk/dwp

freedom-of-information-request@dwp.gov.uk,

1 Attachment

Dear Ryan Jarvis,

I am writing in response to your request for information, received 6th
December.

Yours sincerely,

DWP Central FoI Team