Hong Kong watchdog sets integrity standards for government computers to fight misuse

Hong Kong's Independent Commission Against Corruption (ICAC) has introduced new standards for government computer systems to combat potential misuse and corruption. Commissioner Danny Woo Ying-ming stated that investigations revealed loopholes in procedures that heightened the risk of corruption and data tampering. Effective July, all government bureaus and departments must assess their computer systems' compliance with these standards when requesting funds from the Capital Works Reserve Fund for administrative computer systems.

The integrity assurance standards encompass 12 steps focusing on users, system administration, and monitoring. These measures aim to prevent unauthorized data access, ineffective due diligence, and unnecessary reliance on manual steps that could be susceptible to manipulation. Acting Technology Minister Lillian Cheong Man-lei emphasized the need to balance safety and development when integrating digital measures, highlighting the ICAC's standards as a tool to enhance integrity and data safety.

The standards mandate government organizations to clearly define access rights, use secure methods like two-factor authentication, and implement anti-corruption elements early in their work processes. To prevent data manipulation, the ICAC recommends using watermarks, encryption, and blockchain technologies. The agency also called for mandatory electronic conflict-of-interest declarations and automatic repetitive data processing to overcome the risks associated with relying on paper declarations.