§ Mr. ColvinTo ask the Secretary of State for Transport what steps his Department has, and is taking to improve the security of its computer systems.
§ Mr. Atkins[holding answer 9 February 1990]: For unclassified but sensitive systems Departments are expected to follow CCTA guidance covering all aspects of IT security and the application of this has been tightened recently. CCTA advice is kept under continuous review and is based on analysis of security risks and requirements using structured methods such as CCTA's risk analysis and management methodology (CRAMM) which has also been made commercially available.