The March deadline for the Government Connect Code of Connection has come and gone, with slightly over 50% of local authorities having reached compliance with the CoCo Standard, and the remainder on target for the final September deadline. However, with recent continued investigation into improper access of the Department of Works and Pensions database, the question is being asked, is delivering on user awareness an impossible task for the public sector?
The dual issues of user awareness and user accountability have plagued public sector IT Security over the past 18 months. In light of this fact, ensuring that users are fully aware of their responsibilities with regards to the handling of sensitive information is a core component of compliance with the Government Connect Code of Connection framework. Over 140,000 central and local government employees have access to the DWP database, and policing this vast amount of users continues to be a problem for all organisations involved, as illustrated by the investigation of 14 instances of improper access of the database in the latter part of 2008.
Leading policy management company, Metacompliance, offer a solution to the problem of user awareness in government organisations, in the form of MetaCompliance Advantage, the newest addition to the MetaCompliance suite of information security solutions. Metacompliance Country Manager, Anna Kelpie, has been working closely with the Local Authority sector in implementing effective user engagement programmes that enable organisations to increase user awareness and accountability, and achieve compliance with the CoCo standard. She gives us her view on the main issues facing local authorities in dealing with user awareness and accountability, and how MetaCompliance Advantage is helping organisations tackle these issues:
MetaCompliance Advantage automates the key compliance issues associated with user awareness and engagement, enabling governance stakeholders to initiate a long term compliance strategy that ensures the continual measurement and control of user awareness over time. Metacompliance will be in attendance at the upcoming InfoSecurity Europe Exhibition in April. If you would like further information on MetaCompliance Advantage or any products in the MetaCompliance suite, please visit us at stand K92, or call 0207 917 9527 to arrange a short demonstration.