Vol. 558 No. 6
79 Mr. Durkan asked the Tánaiste and Minister for Enterprise, Trade and Employment if all information electronically stored in her Department is adequately protected against hackers; if there have been breaches in this security; and if she will make a statement on the matter. [25273/02]
Apart from one isolated incident which occurred in the Companies Registration Office (CRO) which is an executive office of my Department, in early November 2000, the security of my Department's computer system has not been breached.
The isolated attempt to hack into one computer system in the CRO failed as it was very quickly detected and remedial action was undertaken to tighten security on this system. It must be recognised that individuals who engage in hacking activities do so on an ongoing basis and are extremely computer literate. Their challenge is to outmanoeuvre technological advances in security systems. This is why all organisations must remain vigilant in this regard at all times.
My own Department is very conscious of the need to stay abreast of technological advances in the area of computer security. Accordingly, a full security review of all systems was undertaken by expert security consultants during 2002. The results of this review have been considered and additional work as appropriate has been undertaken to ensure, in so far as is possible, that systems are securely protected against attack.
80 Mr. Durkan asked the Minister for Defence if all information electronically stored in his Department is adequately protected against hackers; if there have been breaches in this security; and if he will make a statement on the matter. [25274/02]
My Department has installed security measures for all electronically stored information in order to protect against hackers and no breaches have been detected. The security measures, e.g. firewalls and anti-virus software in place are the most up to date versions. These are continually tested and upgraded to the highest levels. Recent measures taken in the Department include the updating, implementation and promulgation of security guidelines at technical and user levels, in order to ensure best practice.
