Dáil Éireann Debate, Tuesday - 16 July 2013
386. Deputy Emmet Stagg asked the Minister for Education and Skills if he will advise the reason the IT section of Student Universal Support Ireland has failed to answer a security breach notified to them on 29 May 2013. [35547/13]
Amharc ar fhreagraOfficials in my Department have been informed by Student Universal Support Ireland (SUSI) that the issue raised by the Deputy has been reviewed internally. SUSI are currently reviewing their approach regarding the provision of password information in an email in a way that will retain user friendliness and user security.I also understand from SUSI that: 1. All passwords and bank details in the system are encrypted; 2. A user account become blocked after 8 failed attempts and the account is blocked for 20 minutes; 3. HTTPS is used, so all communication is over an encrypted channel; and 4. The database is located behind Revenue firewalls and has the same level of protection as any Revenue portal. SUSI ensure that safety and security audits are carried out on all streams of information control and continuously monitor, review and amend their security systems in line with best practice.
