Public trust key to making online services work

Public trust in security and data protection are central to making online and shared services work, government security heads have said.

Public trust in security and data protection are central to making online and shared services work, according to government security chiefs.

Jon Ashton, director for information assurance at Communications-Electronics Security Group (CESG) - part of GSHQ, said there could be increased security risks as more citizen data appeared online.

"If citizens lose confidence in online services, it would take a long time to recover," he said.

Risks can be combated by educating citizens down to school level, and working closely with the private sector to develop systems - which Ashton said could represent a "tremendous opportunity" for commercial exports.

"The single biggest issue is that HMG requirements need to be aggregated wherever possible. Bespoke security solutions for each department are just not affordable," he added.

Data protection is also becoming increasingly important as more councils move to shared services, said David Smith, deputy information commissioner at the Information Commissioner's Office. "Trust and confidence will go if data protection is not built in," he said.

However, Smith said it was a myth that data protection was an obstacle to sharing data. "Data protection is not the starting point. The business case is the starting point, legal compliance comes further down the route."

"We must design privacy into the system from the start, using technology to deliver privacy. On a simple level, that could include things like encryption. Data protection is not an optional extra. It is an essential, integral part of the system even with less available budget it must be built-in," he said.



Enjoy the benefits of CW+ membership, learn more and join.

Read more on IT risk management



Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: