1-17 of 17 results for subject:Software
Librarians' tools
- Search time
- 0.165 seconds
- Solr query time
- 0.008 seconds
- Search query
- subject:Software
- We searched for
- subject_t:Software OR subject_t:Apps OR subject_t:"Computer applications" OR subject_t:"Computer software" OR subject_ses:90662
Type
+
Parliamentary committees (2)
+
Committee proceedings (1)
-
Select Committee oral evidence (1)
-
Select Committee reports (1)
+
Parliamentary papers (2)
-
House of Commons papers (2)
+
Parliamentary proceedings (1)
+
Debates (1)
+
Committee proceedings (1)
-
Select Committee oral evidence (1)
+
Parliamentary questions (15)
-
Written questions (15)
House
Session
Year
Department
Member
Primary member
Answering member
Legislative stage
Legislation
Subject
More
Standards (17)
Publisher
To ask the Secretary of State for Education and Skills, what steps he is taking to encourage the development of appropriate software to assist teachers in monitoring and evaluating pupils' progress; and what advice he has given to (a) schools and (b) local authorities on the use of such software.
To ask the Secretary of State for Education and Skills, what steps he is taking to encourage the development of appropriate software to assist teachers in monitoring and evaluating pupils' progress; and what advice he has given to (a) schools and (b) local authorities on the use of such software.
Asked by
Helen Jones
(Labour)
Answered by
David Miliband
(Labour)
Answering body
Department for Education and Skills
Type
Written questions
Status
Answered
Tabled on
8 November 2004
For answer on
15 November 2004
Answered on
15 November 2004
Helen Jones: To ask the Secretary of State for Education and Skills what steps he is taking to encourage the development of
appropriate software to assist teachers in monitoring and evaluating pupils' progress; and what advice he has given to
(a) schools and (b) local authorities on the use of such software. [197639]
Mr. Miliband: My Department produces the Pupil Achievement Tracker software which schools can use to review their overall
performance and that of individual pupils, identify their strengths and weaknesses and set targets for future progress. Commercial
software suppliers are encouraged to develop similar features in their own products. The Department provides schools and LEAs with
information about the Pupil Achievement Tracker and encourages them to use this and other software where it facilitates analysis of
pupils' progress. General guidance, details of packages that provide assessment capability, together with some "good practice" case
studies are also available on the British Educational Communications and Technology Agency (Becta) website.
Subjects
Software; Pupils; Monitoring; Standards; Teachers
Date
15 November 2004
Reference
426 c978W;426 c982W; 197639
House
House of Commons
Type
Select Committee reports; House of Commons papers;
Parliamentary committees
Committee
Committee of Public Accounts
Notes
Received 22.06.04
Subjects
Customs and Excise; Software; Computers; Executive agencies; Standards; Treasury
Commons Library location
CS 246
Date
5 May 2004
Reference
HC 138 2003/04
House
House of Commons
To ask the Secretary of State for Health, if he will make a statement on progress in the use of minimum data setting software in the care sector. (Holding answer 16 March 2004).
To ask the Secretary of State for Health, if he will make a statement on progress in the use of minimum data setting software in the care sector. (Holding answer 16 March 2004).
Asked by
David Drew
(Labour; Co-operative Party)
Answered by
Stephen Ladyman
(Labour)
Answering body
Department of Health
Type
Written questions
Status
Answered
Tabled on
10 March 2004
For answer on
26 April 2004
Answered on
26 April 2004
Mr. Drew: To ask the Secretary of State for Health if he will make a statement on progress in the use of minimum data setting
software in the care sector. [161631]
Dr. Ladyman: [holding answer 16 March 2004]: I am not aware of any developments on minimum data setting software.
Work continues on the development of minimum data sets to support the sharing of information along care pathways and the production
of comparative clinical information to enable services to monitor quality and clinical performance in each of the following national
service framework areas: Cancer Coronary heart disease Mental health Older people, including single assessment, stroke, falls and
dementia Diabetes Renal services
In relation to social services, which are not covered by the majority of the above, core information requirements for adult and
elderly social services were published in August 2001. More recently the Department has published a document defining the electronic
social care record.
Subjects
Software; Health services; Older people; Standards; Social services
Date
26 April 2004
Reference
161631; 420 c839W
House
House of Commons
To ask the Secretary of State for Health, if he will list those local authorities which have been trialling minimum data setting software; and when they are expected to make an evaluation of its effectiveness. - (Holding answer 16 March 2004).
To ask the Secretary of State for Health, if he will list those local authorities which have been trialling minimum data setting software; and when they are expected to make an evaluation of its effectiveness. - (Holding answer 16 March 2004).
Asked by
David Drew
(Labour; Co-operative Party)
Answered by
Stephen Ladyman
(Labour)
Answering body
Department of Health
Type
Written questions
Status
Answered
Tabled on
10 March 2004
For answer on
26 April 2004
Answered on
26 April 2004
Mr. Drew: To ask the Secretary of State for Health if he will list those local authorities which have been trialling minimum data
setting software; and when they are expected to make an evaluation of its effectiveness. [161632]
Dr. Ladyman: [holding answer 16 March 2004]: I am not aware of any nationally sponsored trials of minimum data setting
software in local authorities.
Subjects
Software; Health services; Local government; Standards
Date
26 April 2004
Reference
161632; 420 c839W
House
House of Commons
To ask Mr Chancellor of the Exchequer, pursuant to his Answer of 12th February, Official Report, column 1556W, on the Large Business Office, when the Director of Inland Revenue's Large Business Office first asked Inland Revenue's internal auditors to review the accuracy of the Large Business Office's compliance data for...
To ask Mr Chancellor of the Exchequer, pursuant to his Answer of 12th February, Official Report, column 1556W, on the Large Business Office, when the Director of Inland Revenue's Large Business Office first asked Inland Revenue's internal auditors to review the accuracy of the Large Business Office's compliance data for...
Asked by
James Gray
(Conservative)
Answered by
Baroness Primarolo
(Labour)
Answering body
Treasury
Type
Written questions
Status
Answered
Tabled on
4 March 2004
For answer on
12 March 2004
Answered on
12 March 2004
Mr. Gray: To ask the Chancellor of the Exchequer pursuant to his answer of 12 February, Official Report, column 1556W, on the
Large Business Office, when the Director of Inland Revenue's Large Business Office first asked Inland Revenue's internal auditors to
review the accuracy of the Large Business Office's compliance data for 2002-03; when the internal auditors reported their findings;
when the relevant commissioner first made known to fellow board members of the existence of potentially unreliable reports of the
Large Business Office's compliance performance; when the Board received the report on the issues of the 2003 review; when Inland
Revenue first alerted the National Audit Office to the existence of previously overstated compliance performance for the Large
Business Office in Inland Revenue's annual reports; how many of the Large Business Office's geographic offices were revealed by the
2003 follow-up review to have had at least one Large Business Office caseworker who was not reporting yield in line with
departmental guidance; and what proportion of Large Business Office caseworkers were revealed not to be reporting yield in line with
departmental guidance. [160095]
Dawn Primarolo: The Director of the LBO asked the Internal Audit Office to carry out a review of the 2002-03 figures in April 2003
(after the year end). The IAO made their report in August 2003.
A design fault in the LBO computer system incorrectly invited Inspectors to enter a tax outcome for taxpayer favour adjustments. All
taxpayer favour adjustments were recorded in this way. The Board was advised in October 2003 of the overall adjustments required to
LBO yield figures. The issue was discussed with NAO at a working level in February 2004 as part of their general audit coverage of
the Inland Revenue.
Subjects
Audit; Software; Inland Revenue; National Audit Office; Standards; Taxation
Date
12 March 2004
Reference
160095; 418 c1749W;418 c1751W
House
House of Commons
To ask the Secretary of State for Work and Pensions, what audit mechanisms are in place to determine whether all Information Technology hardware and software products are being properly utilised in his Department. - Inc ref to NAO report "Purchasing and Managing Software Licences".
To ask the Secretary of State for Work and Pensions, what audit mechanisms are in place to determine whether all Information Technology hardware and software products are being properly utilised in his Department. - Inc ref to NAO report "Purchasing and Managing Software Licences".
Asked by
Lord Allan of Hallam
Answered by
Lord Browne of Ladyton
(Labour)
Answering body
Department for Work and Pensions
Type
Written questions
Status
Answered
Tabled on
21 January 2004
For answer on
12 February 2004
Answered on
12 February 2004
Subjects
Software; Computers; Department for Work and Pensions; ICT; Government departments; Monitoring; Standards
Date
12 February 2004
Reference
151058; 417 c1600-1W
House
House of Commons
To ask the Minister for the Cabinet Office, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.
To ask the Minister for the Cabinet Office, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.
Asked by
Lord Allan of Hallam
Answered by
Douglas Alexander
(Labour)
Answering body
Cabinet Office
Type
Written questions
Status
Answered
Tabled on
21 January 2004
For answer on
5 February 2004
Answered on
5 February 2004
Mr. Allan: To ask the Minister for the Cabinet Office what audit mechanisms are in place to determine whether information technology
(a) hardware and (b) software products are being used properly in his Department. [150929]
Mr. Alexander: The Cabinet Office and its agencies (the Central Office of Information and the Government Car and Despatch Agency),
use formal processes and procedures to ensure that all official IT hardware and software is used properly.
The Department maintains asset registers and service statistics, and undertake regular checks on these using both electronic and
manual methods. We have controls in place to guarantee that approved software and hardware products only are used on official
systems, and that they are sourced and supported through approved channels. The Department also use systems to manage and monitor
access to Internet services, to secure the effective day-to-day operation of IT, and for other lawful purposes.
The Cabinet Office Management Code informs staff on the rules and guidelines covering the use of electronic communications
facilities, and highlights the consequences of non-compliance.
Subjects
Software; Computers; ICT; Government departments; Monitoring; Standards; Cabinet Office
Date
5 February 2004
Reference
417 c1047-8W;417 c1047W; 150929
House
House of Commons
To ask the Secretary of State for the Home Department, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.
To ask the Secretary of State for the Home Department, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.
Asked by
Lord Allan of Hallam
Answered by
Fiona Mactaggart
(Labour)
Answering body
Home Office
Type
Written questions
Status
Answered
Tabled on
21 January 2004
For answer on
3 February 2004
Answered on
3 February 2004
Mr. Allan: To ask the Secretary of State for the Home Department what audit mechanisms are in place to determine whether information
technology (a) hardware and (b) software products are being used properly in his Department. [150932]
Fiona Mactaggart: The Home Office (core directorates including the Immigration and Nationality Directorate (IND)) has outsourced
support for most of its IT infrastructures, including desktop computers, to three companies: Sirius (Fujitsu Services with IBM and
Global Crossing) covering the core office and some IND locations (the `POISE' infrastructure);
Siemens covering caseworking for IND; and
Steria covering the Probation Service areas.
Home Office contracts provide for the audit of supplier service provision including licence provision. Asset registers are
maintained for the major infrastructures. The Home Office allows its staff and people working on behalf of the Department reasonable
personal use of its IT equipment. Usage is monitored in accordance with the Information Commissioner's Code of Practice: Monitoring
at Work. The Department's notices: `Non-official use of Home Office telephones and computer facilities', `Use of POISE and the
Internet including non-official purposes' and `Warning to Staff: Misuse and Abuse of IT' set out Departmental policy to staff.
Misuse of hardware and/or software assets may lead to disciplinary measures including dismissal.
Subjects
Software; Computers; ICT; Government departments; Home Office; Monitoring; Standards
Date
3 February 2004
Reference
417 c793-4W;417 c794-5W; 150932
House
House of Commons
To ask the Secretary of State for Trade and Industry, what audit mechanisms are in place to determine whether all Information Technology hardware and software products are being properly utilised in her Department.
To ask the Secretary of State for Trade and Industry, what audit mechanisms are in place to determine whether all Information Technology hardware and software products are being properly utilised in her Department.
Asked by
Lord Allan of Hallam
Answered by
Patricia Hewitt
(Labour)
Answering body
Department of Trade and Industry
Type
Written questions
Status
Answered
Tabled on
21 January 2004
For answer on
2 February 2004
Answered on
2 February 2004
Mr. Allan: To ask the Secretary of State for Trade and Industry what audit mechanisms are in place to determine whether all
Information Technology hardware and software products are being properly utilised in her Department. [151056]
Ms Hewitt: My Department has a range of software products and management policies to ensure that its IT is used in accordance with
its intended purpose.
All IT services have an aligned security policy setting out the security measures to counter threats including misuse. Staff are
advised of these policies and the checks that are made to ensure compliance. The Department's standard desktop service is owned and
managed by our PFI partners and has been designed to prevent the unauthorised addition of products and devices. Auditing of this
environment is carried out with a mixture of detection software, active monitoring of security logs and non-intrusive checks of data
types, keeping in mind the parameters of data protection legislation and complying with OGC guidelines. Allied to these measures are
the best practice guidelines available to all staff and line management.
New services must be procured and implemented in accordance with documented procedures which requires business and security
approval, with major services being subject to OGC Gateway Review.
Subjects
Audit; Software; Computers; Department of Trade and Industry; ICT; Government departments; Monitoring; Standards
Date
2 February 2004
Reference
151056; 417 c645-6W
House
House of Commons
To ask the Secretary of State for Education and Skills, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.
To ask the Secretary of State for Education and Skills, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.
Asked by
Lord Allan of Hallam
Answered by
Charles Clarke
(Labour)
Answering body
Department for Education and Skills
Type
Written questions
Status
Answered
Tabled on
21 January 2004
For answer on
29 January 2004
Answered on
29 January 2004
Mr. Allan: To ask the Secretary of State for Education and Skills what audit mechanisms are in place to determine whether
information technology (a) hardware and (b) software products are being used properly in his Department. [150934]
Mr. Charles Clarke: All members of the Department for Education and Skills have access to the internet. Filtering software is
installed to block access to inappropriate sites and all accesses are monitored and recorded. Attempts to access inappropriate sites
are referred for disciplinary action--staff have to accept the conditions for use of the equipment each time they log into the
network.
Much of the software used by the Department are purchased on a corporate licence--where this is not the case records are maintained
to ensure that only the number of licences purchased are used. All hardware is configured to prohibit the loading of unauthorised
software.
The Department have started to use auditing software to reconcile the amount of software in use against the central records of
software purchases. It is planning to conduct three monthly audits to achieve this.
Hardware is purchased centrally and details of all hardware items are held in an asset database. Hardware is subject to an annual
audit where every item on the asset database is checked either physically or using auditing software to ensure it is still in being
used correctly.
Appropriate action is taken in any cases where hardware cannot be found.
The Department's Internal Audit Division conduct regular audits to ensure that the conditions for use of hardware and software are
both appropriate and are being enforced.
Subjects
Software; Computers; ICT; Government departments; Internet; Monitoring; Standards; Department for Education and Skills
Date
29 January 2004
Reference
417 c525W; 150934
House
House of Commons
To ask the Secretary of State for Environment, Food and Rural Affairs, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in her Department.
To ask the Secretary of State for Environment, Food and Rural Affairs, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in her Department.
Asked by
Lord Allan of Hallam
Answered by
Alun Michael
(Labour; Co-operative Party)
Answering body
Department for Environment, Food and Rural Affairs
Type
Written questions
Status
Answered
Tabled on
21 January 2004
For answer on
29 January 2004
Answered on
29 January 2004
Mr. Allan: To ask the Secretary of State for Environment, Food and Rural Affairs what audit mechanisms are in place to determine
whether information technology (a) hardware and (b) software products are being used properly in her Department. [150930]
Alun Michael: A considerable amount of work is going on in Defra to improve our IT facilities and systems. We are also seeking to
improve usage and exploitation of the capacity of the Department's systems in the interests of efficiency and service delivery. It
is against that background that the variety of audit mechanisms need to be understood. They are:
1. Departmental audit: The IT Audit Branch of the Department's own Internal Audit Division conducts a continuous programme of audit
assignments (approximately 15-20 per year) in order to provide an assurance concerning the management of our IT systems' (hardware
and software) lifecycle--specification, procurement, development, implementation, operations and decommissioning. The scope of audit
assignments included in the programme is determined using a risk-based approach and ranges from in-depth examination of single
projects or operational systems, to "horizontal" reviews of management processes which can be expected to apply reasonably
consistently across projects or systems--for example, software licensing, infrastructure change management, IT governance. Internal
audits contribute to an assurance that hardware and software products are being used properly within the Department, in the sense
that projects/systems contribute effectively and efficiently to the achievement of Departmental objectives, are compliant with legal
and regulatory requirements, apply mandated or claimed standards and acknowledged best practice, and are appropriately economical in
the use of funds and other resources. The Department's Security Branch conducts a rolling programme of IT security audits focusing
on compliance with Departmental IT Security policies throughout the Defra estate. It also co-ordinates the implementation of
BS7799--the British Standard for the Management of Information Security. Internal Audit Division is responsible for independent
review of achievement of compliance with this standard.
2. Other internal tools and mechanisms: There are IT-supported administrative systems in place to assist with the identification and
management of IT assets (hardware and software). A fixed asset inventory is maintained on the Department's Resource Accounting and
Management Information System (RAMIS) and holds details of fixed assets valued at £2,000 or more, including IT assets. The
e-Business Directorate holds information about the software installed on our Office Systems network as well as about major server
and application development software, and ensures that the correct number of software licences is held. An IT inventory management
application is used to identify hardware on Defra's Local Area Networks. "Audit Logs" recording information concerning users' access
to and activity on the Department's IT systems are automatically specified and implemented for all significant IT systems. These are
generally for the benefit of system owners in day-to-day management of the system, but may sometimes be used by Internal Audit to
examine for signs of improper use of the systems.
3. External audit bodies and mechanisms: External audit bodies which may examine IT management functions include reviews by NAO, and
by EU Audit (where the system/function in question is involved in administration of EU-funded schemes). As with internal audit,
external audits of administrative functions may also touch upon IT management issues and may prompt internal audit follow up. All
new major IT-enabled business change programmes within Defra are subject to OGC Gateway Reviews and Health Checks, which examine and
report on the management of Programmes, and can also be regarded as a form of external audit.
Subjects
Software; Computers; Department for Environment, Food and Rural Affairs; ICT; Government departments; Monitoring; Standards
Date
29 January 2004
Reference
417 c490-1W; 150930
House
House of Commons
To ask the Secretary of State for International Development, what audit mechanisms are in place to determine whether all Information Technology hardware and software products are being properly utilised in his Department.
To ask the Secretary of State for International Development, what audit mechanisms are in place to determine whether all Information Technology hardware and software products are being properly utilised in his Department.
Asked by
Lord Allan of Hallam
Answered by
Gareth Thomas
(Labour; Co-operative Party)
Answering body
Department for International Development
Type
Written questions
Status
Answered
Tabled on
21 January 2004
For answer on
28 January 2004
Answered on
28 January 2004
Mr. Allan: To ask the Secretary of State for International Development what audit mechanisms are in place to determine whether all
Information Technology hardware and software products are being properly utilised in his Department. [151055]
Mr. Gareth Thomas: A series of audit mechanisms are in place within DFID to determine that all IT hardware and software products are
being properly utilised. User guidance on Acceptable Use is in force and is published on the DFID Intranet (InSight).
The arrangements to track hardware assets are as follows:
1. Details of PC and printer hardware are maintained in the Desktop Inventory software package by Peregrine. Equipment is held both
by type and by allocated serial number, and details are entered at the time of issue (or re-4 issue) of to whom equipment is issued
and where it is located. Periodic stocktakes are undertaken to confirm and to update the information held in the inventory database,
and anomalies are investigated.
2. Details of remote working laptop computers are held in a separate Microsoft Access database. This has been found to be more
convenient from a support point of view since laptops tend to require rather more maintenance in service, and more configuration
information can be held in this form of corporate record. Again, the equipment is recorded by a uniquely- allocated serial number,
and is allocated to a named individual.
3. A separate issue and return record is maintained for pool laptops, under which authorised individuals may draw a laptop, and sign
for it when taking it out. Issues are time dependant, with users being responsible for the safe return of the equipment--late
returns are followed up.
The arrangements to record software products in use are as follows:
1. DFID employs a standard desktop system, which is distributed to all users. The latest version of this is locked down--this means
that only the system supervisor can load application software onto the machine, and executable program files cannot be downloaded
from the Internet.
2. The Information Systems Department will load other authorised software for specific individuals or departments who require it,
but not until it has been fully tested to confirm that it does not interfere with any other software loaded on the machine or the
network.
3. The Desktop Inventory product is used centrally to report on what software is loaded on DFID computers, and to check for the
presence of files that contravene the central Acceptable Use Policy. Where suspicious files (eg .MP3, .jpg and .bmp files) are
identified, these are either deleted or the reason for their presence is investigated by the Technical Security Manager.
Software licences are held and managed centrally, as a manual exercise at the moment. A Software Asset Management (SAM) system is
currently under investigation to automate this process.
Operationally, user activity on the system, including file accesses, is logged, and the log files are subject to spot checks. User
Internet activity is likewise logged and available for spot checks--this includes sites visited from remote working systems.
Subjects
Audit; Software; Computers; Department for International Development; ICT; Government departments; Monitoring; Standards
Date
28 January 2004
Reference
151055; 417 c422W
House
House of Commons
To ask the Secretary of State for Transport, what audit mechanisms are in place to determine whether all Information Technology hardware and software products are being properly utilised in his Department.
To ask the Secretary of State for Transport, what audit mechanisms are in place to determine whether all Information Technology hardware and software products are being properly utilised in his Department.
Asked by
Lord Allan of Hallam
Answered by
Tony McNulty
(Labour)
Answering body
Department for Transport
Type
Written questions
Status
Answered
Tabled on
21 January 2004
For answer on
28 January 2004
Answered on
28 January 2004
Mr. Allan: To ask the Secretary of State for Transport what audit mechanisms are in place to determine whether all Information
Technology hardware and software products are being properly utilised in his Department. [151057]
Mr. McNulty: The Department maintains a list of approved hardware and software products and specific approval is required for any
purchase not on that list. Microsoft desktop and server software is procured through Office of Government Commerce licensing
arrangements. These licences are managed using software tools at the Microsoft licensing site. Other key software is licensed under
a corporate agreement with Novell and is audited annually by them. The Department also utilises asset tracking and discovery
software to monitor what other hardware and software is being used on the Department's network.
Subjects
Audit; Software; Computers; Department for Transport; ICT; Government departments; Monitoring; Standards
Date
28 January 2004
Reference
417 c359W; 151057
House
House of Commons
To ask the Secretary of State for Foreign and Commonwealth Affairs, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.
To ask the Secretary of State for Foreign and Commonwealth Affairs, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.
Asked by
Lord Allan of Hallam
Answered by
Bill Rammell
(Labour)
Answering body
Foreign and Commonwealth Office
Type
Written questions
Status
Answered
Tabled on
21 January 2004
For answer on
27 January 2004
Answered on
27 January 2004
Mr. Allan: To ask the Secretary of State for Foreign and Commonwealth Affairs what audit mechanisms are in place to determine
whether information technology (a) hardware and (b) software products are being used properly in his Department. [150933]
Mr. Rammell: The Foreign and Commonwealth Office uses a number of means to determine whether its IT is being used properly. These
include: constantly monitoring activity on the IT infrastructure system, Firecrest, including access to websites, and following up
any unusual activity; information systems audits by our internal audit department; requiring all IT users to read and complete an
annual certificate of compliance with the security operating procedures; and checks by IT security advisers that security operating
procedures are being followed.
Post implementation reviews are conducted after a project to deliver new IT has finished, to assess whether the expected benefits
are being achieved. The way the system is being used is one aspect of this assessment.
Subjects
Software; Computers; ICT; Government departments; Internet; Monitoring; Standards; Foreign and Commonwealth Office
Date
27 January 2004
Reference
417 c291-2W; 150933
House
House of Commons
To ask Mr Chancellor of the Exchequer, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.
To ask Mr Chancellor of the Exchequer, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in his Department.
Asked by
Lord Allan of Hallam
Answered by
Ruth Kelly
(Labour)
Answering body
Treasury
Type
Written questions
Status
Answered
Tabled on
21 January 2004
For answer on
27 January 2004
Answered on
27 January 2004
Mr. Allan: To ask the Chancellor of the Exchequer what audit mechanisms are in place to determine whether information technology (a)
hardware and (b) software products are being used properly in his Department. [150931]
Ruth Kelly: The information requested is as follows:
Inland Revenue
There is a full right of access for audit (including National Audit Office) and security interest across the whole of the Inland
Revenue and the IT supplier. This enables the reviewing bodies to fully cover any area of risk as determined by their work planning
processes.
All major new computer projects or enhancements have to provide an audit trail of all computer activity by users. IA monitors
activity to detect potential fraud and misuse. There is a standard set of audit checks carried out over these developments in order
to ensure compliance with all legal and departmental requirements and IA has a seat on the project steering committee to ensure
appropriate consideration is given to audit findings.
IA has a specialised computer audit team of qualified professionals who carry out a programme of technical audits over the provision
of IT services both hardware and software. They use an international computer audit standard (CoBIT) to risk assess the services and
to measure provision against a set of detailed controls. All findings are reported to the responsible senior manager and followed up
to ensure appropriate action.
Overall, IA and DSU have a direct reporting line to the Departmental Audit and Security Committee to raise issues that are high risk
or that IA/DSU consider are not being addressed adequately by managers.
As already referred to, National Audit Office also carry out pieces of review activity across the Partnership and often work in
joint teams with IA and/or DSU.
HM Treasury
The Treasury uses a combination of line management overview and procurement scrutiny to determine whether information technology
hardware and software products are being used properly in the Department. These are supported by internal audit and security reviews
wherever appropriate. Staff identified as making unacceptable use of IT will be subject to disciplinary procedures.
There are two overarching controls over the use of IT in the Treasury: the Departmental IT strategy which sets the tone for the use
of IT, and the annual Business Planning and Budget Planning round which subjects all proposals to high-level business scrutiny.
Further down the line, all IT purchases, whether hardware or software, are required to be supported by a business case to ensure
that there is a formal requirement by the Department for the facilities. After implementation, the Treasury has guidelines
(promulgated to all staff) on the acceptable use of information technology. Certain rules are enforced (e.g. construct and length of
passwords and enforced screen savers) and firewalls are used to protect HMT systems from attack, to protect staff from unwanted
correspondence (spam) and to disable unacceptable internet web access.
In general, line managers are responsible for enforcing the acceptable use of IT facilities provided to their staff. However, they
have access to the resources of the departmental internal audit and security teams to investigate specific incidents. There are also
more general internal audits of IT themes and running contract arrangements to ensure that processes are sound, efficient and
effective. The Department is required to conform to Government security regulations and is subject to security audits to ensure that
it remains compliant.
HM Customs and Excise
Guidance and standards are published covering the procurement, development and use of IT hardware and software. HM Customs and
Excise has developed a single approach to the management of business change--the Business Change Lifecycle. This covers all stages
of IT system development and is aligned with the OGC Gateway Review process. It identifies the stages and products that must be
produced to comply with the HMCE standards. Once implemented the use of hardware and software is controlled through security
standards and acceptable use policy.
It is the responsibility of all managers to ensure that the IT systems provided to their staff are used in accordance with the
guidance and standards, although additional assurance mechanisms are in place. Managers can call upon the services of our Internal
Investigation Division to investigate specific incidents. Compliance is also monitored through an internal assurance programme which
contributes to the annual Statement of Internal Control. Our Internal Audit Division also provides assurance over the operation of
IT systems through their annual programme of audits. Systems are selected for examination based on a risk assessment, and take
account of the significance and materiality to achieving the Department's business objectives. In addition, external audit is
carried out by the NAO. Their audit programme includes IT security and specific controls for key systems.
Subjects
Software; Computers; ICT; Government departments; Internet; Monitoring; Standards; Treasury
Date
27 January 2004
Reference
417 c274-5W; 150931
House
House of Commons
To ask the Secretary of State for Culture, Media and Sport, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in her Department.
To ask the Secretary of State for Culture, Media and Sport, what audit mechanisms are in place to determine whether information technology (a) hardware and (b) software products are being used properly in her Department.
Asked by
Lord Allan of Hallam
Answered by
Richard Caborn
(Labour)
Answering body
Department for Culture, Media and Sport
Type
Written questions
Status
Answered
Tabled on
21 January 2004
For answer on
27 January 2004
Answered on
27 January 2004
Mr. Allan: To ask the Secretary of State for Culture, Media and Sport what audit mechanisms are in place to determine whether
information technology (a) hardware and (b) software products are being used properly in her Department. [150937]
Mr. Caborn: The Department has a range of auditing and monitoring systems in place to ensure that hardware and software are used in
accordance with the Department's policies. We have inventory management systems in place for both hardware and software and a
metering system monitors all software use. The Department is a corporate member of FAST, the Federation Against Software Theft.
All internet access is logged along with all e-mail. Systems are configured such only authorised software may be installed. All
staff sign the Department's Acceptable Use Policy before being allowed access to the Department's IT systems and resign it on an
annual basis thereafter. Our procedures are audited both by the Department's own internal audit function and by independent external
auditors on a regular basis.
Subjects
Software; Computers; ICT; Government departments; Internet; Monitoring; Standards; Department for Culture, Media and Sport
Date
27 January 2004
Reference
417 c277W; 150937
House
House of Commons
Type
House of Commons papers; Select Committee oral evidence;
Parliamentary committees
Committee
Committee of Public Accounts
Subjects
Customs and Excise; Software; Computers; Executive agencies; Standards
Commons Library location
CS 246
Date
15 December 2003
Reference
HC 138-i 2003/04
House
House of Commons