ICAC sets integrity standards for govt computers

The Independent Commission Against Corruption (ICAC) has introduced a new set of integrity assurance standards for government computer systems, aiming to improve security and detect irregular activity. The 12 core control measures, introduced in July, require government agencies to conduct self-assessments when procuring new systems.

ICAC Commissioner Danny Woo, who presided over the unveiling, noted the guidelines were shaped by academic input and the Digital Policy Office, ensuring practicality and relevance. Examples of the measures include user authentication, defined permissions, conflict-of-interest declarations, and access logs. These steps are designed to prevent unauthorized access, track suspicious behavior, and ensure critical processes aren't overlooked.

Woo highlighted that implementing these measures is essential for enhancing departmental efficiency and minimizing the risk of corruption, which could save substantial costs on investigations and system repairs, as well as prevent public relations crises. Acting Secretary for Innovation, Technology and Industry Lillian Cheong emphasized that the government values safety and development equally, and the standards provide ICAC with additional tools to uphold integrity governance.