IDI Security policies and audits
Ryan made this Official Information request to Statistics New Zealand
The request was successful.
From: Ryan
Dear Statistics New Zealand,
Under the Official Information Act, we request the following information related to the Integrated Data Infrastructure (IDI):
1. The current "IDI information, security and privacy policy" and previous versions as referenced in the "Breaches of IDI policy" OIA response (linked below).
2. Related specifications for the implementation and enforcement of this policy, including the current data lab configuration "Security Requirements" as referred to in the "Breaches of IDI policy" OIA response.
3. The annual statistics NZ "Data Lab audit" for each year it has been undertaken as referenced in the "Breaches of IDI policy" OIA response.
4. The number of external security audits that have been undertaken on the IDI and wider Statistics NZ organisation per year since the IDI entered service
5. The reports corresponding to each of these external security audits
"Breaches of IDI policy" OIA request: https://fyi.org.nz/request/7383-breaches...
Yours faithfully,
Ryan
From: Info Mailin - Shared Mailbox
Statistics New Zealand
Thank you for contacting Statistics New Zealand.
We will respond to your enquiry within 2 working days.
If your enquiry is urgent, please call us on 0508 525 525.
Regards
Information Centre Team
Statistics New Zealand Tatauranga Aotearoa
Kind regards,
Information Centre.
Statistics New Zealand Tatauranga Aotearoa
From: Andrew Neal
Statistics New Zealand
Good morning,
I am writing to acknowledge receipt of your official information request dated 17 July 2018 regarding IDI Security policies and audits.
We will endeavour to respond to your request as soon as possible and in any event no later than 14 August 2018, being 20 working days after the day your request was received. If we are unable to respond to your request by then, we will notify you of an extension of that timeframe.
Your request is being handled by myself, Andrew Neal, in the Office of the Government Statistician and Chief Executive. If you have any queries, please feel free to contact me using the details in the signature below. If any additional factors come to light which are relevant to your request, please do not hesitate to contact us so that these can be taken into account.
Regards
Andrew
Andrew Neal
Senior Advisor – Office of the Government Statistician and Chief Executive | Kaiwhakamaherehere Matua – Tari o te Kaitatau a te Kāwanatanga me te Tumuaki
Stats NZ Tatauranga Aotearoa
DDI +64 4 931 4207
From: Andrew Neal
Statistics New Zealand
Hello again
I refer to your official information request received 18 July for the below:
1. The current "IDI information, security and privacy policy" and previous versions as referenced in the "Breaches of IDI policy" OIA response (linked below).
2. Related specifications for the implementation and enforcement of this policy, including the current data lab configuration "Security Requirements" as referred to in the "Breaches of IDI policy" OIA response.
3. The annual statistics NZ "Data Lab audit" for each year it has been undertaken as referenced in the "Breaches of IDI policy" OIA response.
4. The number of external security audits that have been undertaken on the IDI and wider Statistics NZ organisation per year since the IDI entered service.
5. The reports corresponding to each of these external security audits.
The Official Information Act (the Act) requires that we advise you of our decision on your request no later than 20 working days after the day we received your request.
Unfortunately, it may not be possible to meet that time limit and we are therefore writing to notify you of an extension of the time to make our decision, to 14 September 2018.
This extension is necessary because your request includes a large quantity of information – Stats NZ has 33 data labs across New Zealand, and each of these labs need to be advised of the release of their yearly audits.
Collating external security audit reports for Stats NZ as a whole will also take a significant amount of time and effort from multiple teams across the organisation.
Please let us know if you would like to refine your request so we can ensure we are providing the information you are after.
You have the right to seek an investigation and review by the Ombudsman of this decision. Information about how to make a complaint is available at www.ombudsman.parliament.nz.
If you wish to discuss any aspect of your request with us, including this decision, please do get in touch.
Regards
Andrew
Andrew Neal
Senior Advisor – Office of the Government Statistician and Chief Executive | Kaiwhakamaherehere Matua – Tari o te Kaitatau a te Kāwanatanga me te Tumuaki
Stats NZ Tatauranga Aotearoa
DDI +64 4 931 4207 MOB +64 27 218 0345
show quoted sections
From: Andrew Neal
Statistics New Zealand
Good afternoon
Please find attached the response to you Official Information Act request
dated 18 July 2018.
Kind Regards
Andrew Neal
Senior Advisor – Office of the Government Statistician and Chief Executive
Kaiwhakamaherehere Matua – Tari o te Kaitatau a te Kâwanatanga me te
Tumuaki
Stats NZ | Tatauranga Aotearoa
[1]cid:image001.jpg@01D3E5E1.7DD99490
[2]cid:image002.png@01D3E5E1.7DD99490
[3]cid:image003.png@01D3E5E1.7DD99490 [4]cid:image004.png@01D3E5E1.7DD99490
References
Visible links
2. https://www.facebook.com/StatisticsNZ
3. https://twitter.com/Stats_NZ
4. https://www.linkedin.com/company/statist...
Things to do with this request
- Add an annotation (to help the requester or others)
- Download a zip file of all correspondence