Department for Business and Trade: ICT

Department for Business and Trade written question – answered am ar 15 Mai 2024.

Danfonwch hysbysiad imi am ddadleuon fel hyn

Photo of Matt Rodda Matt Rodda Shadow Minister (AI and Intellectual Property)

To ask the Secretary of State for Business and Trade, with reference to the guidance by the Central Digital and Data Office entitled Guidance on the Legacy IT Risk Assessment Framework, published on 29 September 2023, how many red-rated IT systems are used by her Department; and how many red-rated IT systems have been identified since 4 December 2023.

Photo of Alan Mak Alan Mak Minister of State (Department for Business and Trade) (jointly with the Cabinet Office)

The Central Digital and Data Office (CDDO), in the Cabinet Office, has established a programme to support departments managing legacy IT. CDDO has agreed a framework to identify ‘red-rated’ systems, indicating high levels of risk surrounding certain assets within the IT estate. Departments have committed to have remediation plans in place for these systems by next year (2025).

It is not appropriate to release sensitive information held about specific red-rated systems or more detailed plans for remediation within the Department for Business and Trade’s IT estate, as this information could indicate which systems are at risk, and may highlight potential security vulnerabilities.

Does this answer the above question?

Yes0 people think so

No0 people think not

Would you like to ask a question like this yourself? Use our Freedom of Information site.