Written answers

Wednesday, 29 January 2014

Department of Finance

NAMA Staff Unauthorised Disclosures

Photo of Stephen DonnellyStephen Donnelly (Wicklow, Independent)
Link to this: Individually | In context | Oireachtas source

42. To ask the Minister for Finance if the National Asset Management Agency has a recognised data leakage or loss prevention system in place to detect and prevent data breaches and data exfiltration transmissions; if he is satisfied that whatever system is in place is adequate to prevent sensitive data from being deliberately or mistakenly disclosed to unauthorised personnel; and if he will make a statement on the matter. [4541/14]

Photo of Michael NoonanMichael Noonan (Limerick City, Fine Gael)
Link to this: Individually | In context | Oireachtas source

Following identification by it of an unauthorised electronic release of information in August 2012, NAMA implemented further systems enhancements.  I am satisfied with NAMA's procedures to prevent data breaches, however as the Deputy would be aware that no system or control can provide absolute assurance in cases of an individual determined to break the law.

I am advised that NAMA operates best-in-class data loss/leak prevention systems across email, applications and network drives.  The systems in place are designed to detect potential data breaches/data ex-filtration transmission and to prevent such breaches by monitoring, detecting and blocking sensitive data while in use, in motion and in storage.  Systems in place include restricted access to applications on network drives, restrictions on copying data to external media, restrictions on email transmissions to non-corporate addresses, and restrictions on the type and size of attachments that can be transmitted.  There are audit trails of all access on NAMA s applications. A formal quarterly review of access to NAMA systems is carried out.  This in addition to the on-going monitoring, review and, where relevant, updating and regular auditing of systems.

Comments

No comments

Log in or join to post a public comment.