DataSecurity,TransfersandAccessSandraTudorHMRC.pptVIP

12/02/2007 Project Name: HMRC v1.8 12/02/2007 Event Name Here Project Name: HMRC v1.8 Data Security, Transfers and AccessSandra Tudor HMRC September 2008 Presentation Overview Data Security in HMRC – 2007 to 2008 Impact on Trade Statistics Data Governance Data Sharing and Data Access The DARTTS project Data Security – 2007 Following an incident in 2007, there was a wide-ranging review of data security in HMRC This led to The Lockdown Clarification of Guidance Roles Responsibilities Processes and Some system improvements Trade Statistics and data security: Processing Key features Secure Mainframe Unix systems with password access Trade statistics located on a complete floor ‘Electronic folder’ for trader specific information Secure restricted access areas on shared network drives Restricted discussions with operational colleagues concerning individual data items Limited access to aggregate data prior to release Encrypted laptops, with restrictions on movement of laptops Blackberries Trade Statistics and data security: Data Access Existing Trade Statistics checks Check if the data are in the public domain (or pre-release) If not usually published Do we want to release the data? Do we need/have a legal gateway? Access to Trade Statistics is governed by EC legislation; HMRC legislation; EU Statistical Code of Practice; UK Code of Practice; and new UK Statistical legislation passed in 2008 Trade Statistics and data security: Data Transfers New process for ‘bulk data - once agreed we can release the data Complete a Data Transfer Request Security classification, transfer method, customer, frequency, etc. Send to our ‘Data Guardian’ for approval from IT Security Group Once authorised, send data We move large volumes of aggregated data each month and needed to speed up the new approval process Trade Statistics and data security: Data Transfers (2) We developed a matrix of product type by category Published/ unpublish