Questions for HMRC and government
If Man in a Shed was on a select committee, or was an MP - then these are the general questions I'd be starting to ask the Treasury and HMRC.
- List the dates of all risk assessments carried out that cover the child benefit database in the last 10 years.
- Provide a copy of the last two risk assessment reports that relate to the child benefit database.
- Provide a list of all action items from the above risk assessment reports, with details of how they were closed out.
- Provide details of all security audits carried out which related to the child protection database. How many non compliance issues where identified and how have they been handled.
- Provide a copy of the Manual of Protective Security and HMG Standards, Manuals & Memos on the subject of information security.
- Outline the security architecture that government databases such as the child benefit database are implemented in as of 21 Nov 07.
