Security threats Toolkit

Story: Capita takes the blame for tax security lapse

• 
• 

This is basic stuff, it should not have occurred and I trust that Capita are going to put Lambeth Council and its constituents into the same position that they would have been in had the breach of security had not occurred.

I am always amazed when outsourcing comapnies are quoted as saying that the issue was down to an error on the part of a single person. The whole point of outsourcing service delivery is that it should provide a competent and safe pair of hands for running the service to good industry practices and against the framework of a decent security policy.

What happened to the processes that provide the checks to stop something like this happening and why did they fail?

Why was the encryption of personal data switched off in the first place? Do we infer that live data which had not been made anonymous waas being used in testing?

• 
• 

• 
• 
• 

Full Talkback thread