§ Mr. CohenTo ask the Secretary of State for Wales whether he has incorporated the code of practice for information security management, published by the British Standards Institution, into relevant contracts with information technology suppliers.
§ Mr. RedwoodThe code of practice for information security management was developed by and established for use by commercial organisations and does not specifically address the requirements for the protection of official information. In procurement and all other aspects of IT development and operation, my Department follows the policy and guidance set down by the Government's own IT security authorities.