Ruairi Quinn (Dublin South East, Labour)
Link to this: Individually | In context | Oireachtas source

Officials in my Department have been informed by Student Universal Support Ireland (SUSI) that the issue raised by the Deputy has been reviewed internally. SUSI are currently reviewing their approach regarding the provision of password information in an email in a way that will retain user friendliness and user security.

I also understand from SUSI that:

1. All passwords and bank details in the system are encrypted. 2. A user account become blocked after 8 failed attempts and the account is blocked for 20 minutes.3. HTTPS is used, so all communication is over an encrypted channel.4. The database is located behind Revenue firewalls and has the same level of protection as any Revenue portal.

SUSI ensure that safety and security audits are carried out on all streams of information control and continuously monitor, review and amend their security systems in line with best practice.