§ Mr. Cohenasked the Secretary of State for Trade and Industry what arrangements operate for the logging of those who have access to (a) computer and (b) manual files kept by his Department on individuals; and if he will describe the procedures in operation for both categories.
§ Mr. ButcherSpecific guidelines on security and access to automatically processed data in Government Departments are observed. They are contained in "Protection of Information in Computer Systems" and "Central Government Code of Practice No. 21", issued by the Central Computer and Telecommunications Agency, which give recommended procedures to safeguard data in computer installations. Copies of these guidelines have been placed in the House Library.
For personnel records held on computers a manual register is kept of those to whom access has been granted and the nature of that access. The computer system automatically maintains an audit log of all accesses which have been made, the purpose of access and the identity of the user.
For manual files a record is kept on the front of each file on each movement between the local or archival registry and the person requesting access. The registry records the names and locations of officials requesting access and the date of access in docket books.