Video | Agriculture | Confidence | Economy | Energy | Employment | Finance | Media | Property | RBNZ | Science | SOEs | Tax | Technology | Telecoms | Tourism | Transport | Search


Commission Releases Independent Reviews Into Security Incident, Details Action Taken

The Commerce Commission has released two reviews into an October 2019 security incident and accepts all findings and recommendations.

The security incident arose from the theft of computer equipment belonging to one of the Commission’s external providers in a burglary. The computer equipment is thought to have contained a range of documents relating to the Commission’s work, including some confidential information from businesses and individuals.

The first report, by Mr Fowler QC, looked into the circumstances relating to the specific incident.

“The report finds the external provider was clearly under contractual obligations with regard to information security and the retention and disposal of confidential material, that they understood these obligations and were plainly in breach of them,” Commission Chair Anna Rawlings said.

“While this incident resulted from criminal activity and our provider failing to meet its obligations, it is our job to keep sensitive information safe and we take responsibility for that. There was more that the Commission could have done to ensure the contractor complied with their obligations and Mr Fowler QC has made some recommendations on how we could better mitigate the type of risk raised by the security incident.”

The second report by KPMG looked into the Commission’s information management and security, including information held or accessible by third-party suppliers.

“KPMG found that the Commission has a moderate overall level of maturity in security and noted that the majority of its findings are consistent with what it sees in many other public and private sector organisations. It found a strong information security culture and awareness among staff but also makes recommendations for improvements in a number of areas including policies, procedures and work practices and our management of external providers,” Ms Rawlings said.

“We accept the findings and recommendations from both reviews. We have already made a number of improvements in the areas identified by Mr Fowler QC as directly related to the security incident. We are also embarking on a broad ranging information management and security programme, to help ensure that those we interact with can continue to have confidence in our ability to protect confidential and commercially sensitive information provided to us.”

Actions already completed in response to the incident include:

  • Ending the Commission’s contract with the external provider and having the work done in house by Commission staff or on-site by external providers using Commission devices
  • Contacting current and past suppliers of services to the Commission to seek assurances they have appropriate security processes and protocols in place and to obtain details of those processes and protocols
  • Recruiting a Procurement Manager to improve contract management, reviewing contracts with external providers to ensure they include appropriate security and confidentiality obligations, and changing the internal contract approvals process
  • Making a number of changes to improve the way information is exchanged with external providers and third parties.

The Commission has also committed to voluntarily adopting the government’s Protective Security Requirements.

Ms Rawlings said, “These measures, together with the information management and security programme, respond to the findings of the reviews and reflect the Commission’s commitment to continued improvement of our overall information security maturity. “

The two reviews, along with a summary of the incident and the Commission’s response to it can be found here


© Scoop Media

Business Headlines | Sci-Tech Headlines


Auckland Transport: Successful Bridge Repair Opens Two Additional Lanes To Traffic

The opening of two additional lanes on the Auckland Harbour Bridge this morning will help relieve some motorway congestion for motorists heading home to the North Shore tonight. More>>


Statistics New Zealand: COVID-19 Sees Record 12.2 Percent Fall In New Zealand’s Economy

Gross domestic product (GDP) fell by 12.2 percent in the June 2020 quarter, the largest quarterly fall recorded since the current series began in 1987, as the COVID-19 restrictions in place through the quarter impacted economic activity, Stats NZ said ... More>>


Climate: Scientists Release ‘Blueprint’ To Save Critical Ecosystems And Stabilize The Earth’s Climate

A group of scientists and experts produced the first comprehensive global-scale analysis of terrestrial areas essential for biodiversity and climate resilience, totaling 50.4% of the Earth's land. The report was published in Science Advances ... More>>


MPI: Independent Review Launched Into Assurances For Safe Transport Of Livestock By Sea

The Ministry for Primary Industries (MPI) has launched an independent review of the assurances it receives for the safe transport of livestock by sea. MPI Director-General Ray Smith says Mike Heron QC has been appointed to lead the review, which is expected ... More>>


Computers: New Zealand PC Market Grows Nearly 40% Due To Work From Home Demand

COVID-19 had large impacts on demand for PCs as businesses prepared for lockdowns by purchasing notebooks to mobilise their workforce. In the second quarter of 2020, New Zealand's Traditional PC market experienced a 39.7% year-on-year (YoY) growth ... More>>


University Of Auckland: Whale-Watching By Satellite – Follow Their Travels Online

Scientists have successfully attached satellite tracking tags to six New Zealand southern right whales, or tohorā, and are inviting the public to follow the whales’ travels online. Part of a major research project involving the University of Auckland ... More>>

Commerce Commission: Kiwibank Admits System Failures And Agrees To Pay Customers $5.2 Million

Kiwibank has entered into a settlement agreement with the Commerce Commission after reporting that it failed to have in place robust home loan variation disclosure policies, procedures and systems. In a settlement dated 27 August 2020, Kiwibank admitted that ... More>>

Ministry of Health: Public Transport Distancing Requirements Relaxed

Physical distancing requirements on public transport have been reviewed by the Ministry of Health to determine whether they are still required at Alert Level 2 (or below). The Ministry’s assessment is that mandatory face covering and individuals tracking ... More>>


NZHIA: New Zealand Hemp Industry Set To Generate $2 Billion Per Annum And Create 20,000 Jobs

A new report says a fully enabled hemp industry could generate $2 billion in income for New Zealand by 2030, while also creating thousands of new jobs. Written by industry strategist Dr Nick Marsh, the report has prompted calls from the New Zealand Hemp ... More>>


Stats NZ: One In 14 Employed People Report High Risk Of Losing Jobs

About one in 14 workers say they expect to lose their job or business by mid-2021, Stats NZ said today. A survey of employed people in the June 2020 quarter showed 7 percent felt there was a high or almost certain chance of losing their job or business ... More>>

ASB Quarterly Economic Forecast: NZ Economy Doing Better Than Expected, But Challenges Remain

August lockdown estimated to have shaved 8% off NZ’s weekly GDP, and 0.5% off annual GDP Economy now expected to shrink 5% (year-on-year) by end of 2020 Unemployment rate now expected to peak at 7.2% The latest ASB Quarterly Economic Forecast is less ... More>>