The Scottish Government Mobiles Services Employee Agreement is provided in Annex B. The Scottish Government IT Code of Conduct is provided in Annex A. Scottish Government will not comment on any specific cyber security incidents or attempts made to compromise Scottish Government mobile or other electronic devices. In calendar years In calendar years 2018, 2019, 20 (to date) a total of 7 mobile phones have been recorded as stolen. In calendar years 2018, 2019, 20 (to date) a total of 123 mobile phones have been recorded as lost. How many Government issued mobile devices have been lost/stolen since 2018. Our Mobile Device Management policies prevents the connection of personal accessories to the corporate mobiles phones and tablets. Scottish Government mandates that officials requiring access to selected corporate systems or corporate information are required to do so by means of a Corporately Owned Privately Enabled device provided by Scottish Government. This could therefore enable them to target specific types of attack or data exfiltration methods and would constitute substantial prejudice to the effective conduct of public affairs.Īny mobile phone or tablet managed by our Mobile Device Management system is able to access the Government Email and Intranet systems. Providing details about the information you have requested into the public domain could subsequently be used by threat actors, building a picture of our security capability, to evade any controls we might or might not have in place. Disclosing this information would substantially prejudice our ability to carry out the effective conduct of public affairs. While our aim is to provide information whenever possible, in this instance an exemption under section 30(c) of FOISA (prejudice to effective conduct of public affairs) applies to your request. A personal business application is one that directly or indirectly supports the business of Scottish Government. Installation of any personal business applications is covered by the SG’s IT Code of Conduct and Mobile Services Employee Agreement. These devices allow users to install ‘personal business applications’. There is no defined list of applications are allowed to be installed on corporate mobile phones and tablets. Any addition software can be requested through our software catalogue. Scottish Government Ministers are provided with a Government supplied corporate laptop, tablet or mobile phone.Īll laptops are issued with a corporate suite of applications. My response to your request is provided below. What training and/or education do MSP receive with regards Data Security and Q11.How is Data Security managed within Constituency Offices? Response Would you be able to provide a copy of the various policies regarding the use of both Government supplied and Personal mobile devices? How many Security breaches have been reported, since 2014, that related to compromised Government or Personal mobile devices? How many Government issued mobile devices have been lost/stolen since 2018 Are personal accessories to their devices, either Government supplied or Personal, allowed to be connected (thinking specifically of a Apple or Samsung Galaxy Watch) and allow notifications and/or display of Government related emails? If personal devices are allowed access to Government systems, and if so, are policies such as minimum OS Level (such as iOS 16 or Android 13) and remote wiping implemented? What access do these devices have to Government intranet and file systems and are enhanced functions such as copying and pasting between applications permitted? What systems are used to manager and secure them? For example, Microsoft Intune and Microsoft 365 Defender for Endpoint? What applications are allowed to be installed on these devices? For example, Microsoft Word, Scotrail Timetable, Microsoft Outlook & Teams, iMessage or WhatsApp? What types of Government supplied devices are used by Government Ministers (including the First Minister) and Cabinet Secretaries?
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |