IDI Security policies and audits

Ryan made this Official Information request to Statistics New Zealand

The request was successful.

From: Ryan

Dear Statistics New Zealand,

Under the Official Information Act, we request the following information related to the Integrated Data Infrastructure (IDI):

1. The current "IDI information, security and privacy policy" and previous versions as referenced in the "Breaches of IDI policy" OIA response (linked below).
2. Related specifications for the implementation and enforcement of this policy, including the current data lab configuration "Security Requirements" as referred to in the "Breaches of IDI policy" OIA response.
3. The annual statistics NZ "Data Lab audit" for each year it has been undertaken as referenced in the "Breaches of IDI policy" OIA response.
4. The number of external security audits that have been undertaken on the IDI and wider Statistics NZ organisation per year since the IDI entered service
5. The reports corresponding to each of these external security audits

"Breaches of IDI policy" OIA request: https://fyi.org.nz/request/7383-breaches...

Yours faithfully,

Ryan

Link to this

From: Info Mailin - Shared Mailbox
Statistics New Zealand

 

Thank you for contacting Statistics New Zealand.

We will respond to your enquiry within 2 working days.
If your enquiry is urgent, please call us on 0508 525 525.

Regards

Information Centre Team
Statistics New Zealand Tatauranga Aotearoa

 

Kind regards,

Information Centre.  

Statistics New Zealand Tatauranga Aotearoa

 

 

Link to this

From: Andrew Neal
Statistics New Zealand

Good morning,

I am writing to acknowledge receipt of your official information request dated 17 July 2018 regarding IDI Security policies and audits.

We will endeavour to respond to your request as soon as possible and in any event no later than 14 August 2018, being 20 working days after the day your request was received. If we are unable to respond to your request by then, we will notify you of an extension of that timeframe.

Your request is being handled by myself, Andrew Neal, in the Office of the Government Statistician and Chief Executive. If you have any queries, please feel free to contact me using the details in the signature below. If any additional factors come to light which are relevant to your request, please do not hesitate to contact us so that these can be taken into account.

Regards
Andrew

Andrew Neal
Senior Advisor – Office of the Government Statistician and Chief Executive | Kaiwhakamaherehere Matua – Tari o te Kaitatau a te Kāwanatanga me te Tumuaki
Stats NZ Tatauranga Aotearoa
DDI +64 4 931 4207

    

Link to this

From: Andrew Neal
Statistics New Zealand

Hello again

I refer to your official information request received 18 July for the below:

1. The current "IDI information, security and privacy policy" and previous versions as referenced in the "Breaches of IDI policy" OIA response (linked below).
2. Related specifications for the implementation and enforcement of this policy, including the current data lab configuration "Security Requirements" as referred to in the "Breaches of IDI policy" OIA response.
3. The annual statistics NZ "Data Lab audit" for each year it has been undertaken as referenced in the "Breaches of IDI policy" OIA response.
4. The number of external security audits that have been undertaken on the IDI and wider Statistics NZ organisation per year since the IDI entered service.
5. The reports corresponding to each of these external security audits.

The Official Information Act (the Act) requires that we advise you of our decision on your request no later than 20 working days after the day we received your request.
Unfortunately, it may not be possible to meet that time limit and we are therefore writing to notify you of an extension of the time to make our decision, to 14 September 2018.

This extension is necessary because your request includes a large quantity of information – Stats NZ has 33 data labs across New Zealand, and each of these labs need to be advised of the release of their yearly audits.
Collating external security audit reports for Stats NZ as a whole will also take a significant amount of time and effort from multiple teams across the organisation.
Please let us know if you would like to refine your request so we can ensure we are providing the information you are after.

You have the right to seek an investigation and review by the Ombudsman of this decision. Information about how to make a complaint is available at www.ombudsman.parliament.nz.

If you wish to discuss any aspect of your request with us, including this decision, please do get in touch.

Regards
Andrew

Andrew Neal
Senior Advisor – Office of the Government Statistician and Chief Executive | Kaiwhakamaherehere Matua – Tari o te Kaitatau a te Kāwanatanga me te Tumuaki
Stats NZ Tatauranga Aotearoa
DDI +64 4 931 4207 MOB +64 27 218 0345

show quoted sections

Link to this

From: Andrew Neal
Statistics New Zealand


Attachment image001.jpg
9K Download

Attachment image002.png
2K Download

Attachment image003.png
3K Download

Attachment image004.png
2K Download

Attachment OIA0094 Final Report for Certification and Accreditation of Cloud Based IT Systems Redacted.pdf
9.6M Download View as HTML

Attachment OIA0094 Review of Access to Statistical Data within IT Systems final report Redacted.pdf
3.4M Download View as HTML

Attachment OIA0094 Review of End User Computing Final Report 2013 Redacted.pdf
3.8M Download View as HTML

Attachment OIA0094 Ryan IDI Security policies and audits.docx
234K Download View as HTML

Attachment OIA0094 Statistics NZ Identity and Access Management Strategy and Roadmap v1.0 Redacted.pdf
682K Download View as HTML


Good afternoon

 

Please find attached the response to you Official Information Act request
dated 18 July 2018.

 

Kind Regards

 

 

Andrew Neal

Senior Advisor – Office of the Government Statistician and Chief Executive

Kaiwhakamaherehere Matua – Tari o te Kaitatau a te Kâwanatanga me te
Tumuaki
Stats NZ | Tatauranga Aotearoa

[1]cid:image001.jpg@01D3E5E1.7DD99490

[2]cid:image002.png@01D3E5E1.7DD99490 
[3]cid:image003.png@01D3E5E1.7DD99490  [4]cid:image004.png@01D3E5E1.7DD99490

 

References

Visible links
2. https://www.facebook.com/StatisticsNZ
3. https://twitter.com/Stats_NZ
4. https://www.linkedin.com/company/statist...

Link to this

Things to do with this request

Anyone:
Statistics New Zealand only: