Immigration Department Learns Information Security Management Basics

First published: 30^th June 2008

The Immigration Department, following a recent personal data leak, has pledged to comply with 10 recommendations made by the Privacy Commissioner. These include categorising according to their sensitivity, ranging from "absolute prohibition of photocopying or storage" to "data that can be taken or copied for use outside the office". Anyone who has looked at information security best practices or standards, such as ISO 27001, will know that this type of categorisation is a basic step in the security process. The Immigration Department should be encouraged in their efforts, but why weren't the basics already in place?