ICAC sets integrity standards for govt computers

The Independent Commission Against Corruption (ICAC) has introduced new integrity assurance standards for government computer systems. These standards consist of 12 core control measures aimed at improving system security and detecting irregular activity. Starting in July, government bureaus and departments must undergo a self-assessment against these standards whenever procuring new computer systems.

ICAC Commissioner Danny Woo, speaking at the ceremony unveiling the guidelines, stated that the standards were developed after consulting with academics and the Digital Policy Office to ensure their practicality and relevance.

The new measures include user authentication, clearly defined permissions, conflict-of-interest declarations, and approval processes integrated into the system to prevent unauthorized access to confidential information. Additional features such as access logs, anomaly detection, and automated alerts will help departments identify suspicious incidents early.

Woo emphasized that implementing these measures is an investment in enhancing departmental efficiency, ultimately reducing the risk of corruption and the associated costs of ICAC investigations, system repairs, and potential PR crises.

Acting Secretary for Innovation, Technology and Industry Lillian Cheong echoed the importance of these standards, stating that the government has consistently prioritized safety and development. The integrity governance standards, she said, provide ICAC with additional tools to fulfill its core value of promoting integrity in governance.