Question to the Ministry of Defence:

To ask the Secretary of State for Defence, with reference to the policy paper entitled Transforming for a digital future: 2022 to 2025 roadmap for digital and data, updated on 29 February 2024, what steps his Department has taken to mitigate the risks of red-rated legacy IT systems.

Answered by James Cartlidge - Minister of State (Ministry of Defence)

The Central Digital and Data Office (CDDO), in the Cabinet Office, has established a programme to support Departments managing legacy IT. CDDO has agreed a framework to identify ‘red-rated’ systems, indicating high levels of risk surrounding certain assets within the IT estate. Departments have committed to have remediation plans in place for these systems by next year (2025).

It is not appropriate to release sensitive information held about specific red-rated systems or more detailed plans for remediation within the Ministry of Defence’s IT estate, as this information could indicate which systems are at risk, and may highlight potential security vulnerabilities.

Question to the Foreign, Commonwealth & Development Office:

To ask the Deputy Foreign Secretary, with reference to the policy paper entitled Transforming for a digital future: 2022 to 2025 roadmap for digital and data, updated on 29 February 2024, what steps his Department has taken to mitigate the risks of red-rated legacy IT systems.

Answered by David Rutley - Parliamentary Under-Secretary (Foreign, Commonwealth and Development Office)

The Central Digital and Data Office (CDDO), in the Cabinet Office, has established a programme to support departments managing legacy IT. CDDO has agreed a framework to identify 'red-rated' systems, indicating high levels of risk surrounding certain assets within the IT estate. Departments have committed to have remediation plans in place for these systems by next year (2025). It is not appropriate to release sensitive information held about specific red-rated systems or more detailed plans for remediation within the FCDO's IT estate, as this information could indicate which systems may be at risk, and may highlight potential security vulnerabilities. FCDO are actively managing their legacy estate via their existing change plans through system upgrades and migration to public cloud.

Question to the Scotland Office:

To ask the Secretary of State for Scotland, what steps he has taken to reduce the cost of fraud in his Department in the last three financial years.

Answered by Alister Jack - Secretary of State for Scotland

The Scotland Office reported no cases of fraud or amounts lost due to fraud or error in any of the last three financial years. This is disclosed as part of the Annual Report and Accounts available on GOV.UK.

The Government is determined to uncover fraud in the public sector and is proud of its record. As part of this, the Government established the Public Sector Fraud Authority (PSFA).

In 22/23, the PSFA set a target of delivering £180m of savings to the taxpayer. In fact, the PSFA far surpassed this within the first 12 months by preventing and recovering £311 million. As it enters its second year, the PSFA has a target of achieving £185 million of savings for the taxpayer.

The Government has also announced an additional £34 million to deploy cutting-edge tools and Artificial Intelligence tools to help combat fraud across the public sector, saving £100 million for the public purse. This is in addition to existing partnerships between PSFA and the tech sector.

Question to the Ministry of Justice:

To ask the Secretary of State for Justice, what steps he has taken to reduce the cost of fraud in his Department in the last three financial years.

Answered by Mike Freer - Parliamentary Under-Secretary (Ministry of Justice)

The Ministry of Justice (MoJ) recognises that the nature of the fraud threat it faces is constantly evolving and that our response must be equally as agile. The MoJ has been developing its Counter Fraud Centre of Expertise (CoEx) since 2019 and this team has a central governance and oversight role across the Department, including its Executive Agencies, Arm’s Length Bodies and core Functions.

The MoJ maintains a collaborative working relationship with the Public Sector Fraud Authority (PSFA) regarding Counter Fraud Functional Standards and performance, and contributes to PSFA thematic working groups, for example internal fraud risks.

The MoJ conducts regular internal reviews against Functional Standards across the Department and collaborates with teams to improve performance and raise awareness in terms of fraud risk assessment, fraud controls and fraud reporting.

The MoJ took part in the 2022 National Fraud Initiative that looked to identify duplicated payroll data held across other public and private sector bodies to prevent and detect fraud.

The MoJ provides management information and updates to the Department Audit and Risk Committee.

The MoJ has always had a current Counter Fraud Strategy, Policy and Response Plan in place, all of which are readily accessible on the respective Intranet sites.

Question to the Foreign, Commonwealth & Development Office:

To ask the Deputy Foreign Secretary, with reference to page 21 of the progress update entitled Transforming for a Digital Future: Government's 2022 to 25 roadmap for digital and data, published in February 2024, when his Department first assessed each of its red-rated legacy IT systems as red-rated.

Answered by David Rutley - Parliamentary Under-Secretary (Foreign, Commonwealth and Development Office)

The Central Digital and Data Office (CDDO), in the Cabinet Office, has established a programme to support departments managing legacy IT. CDDO has agreed a framework to identify 'red-rated' systems, indicating high levels of risk surrounding certain assets within the IT estate. Departments have committed to have remediation plans in place for these systems by next year (2025). It is not appropriate to release sensitive information held about specific red-rated systems or more detailed plans for remediation within the FCDO's IT estate, as this information could indicate which systems may be at risk, and may highlight potential security vulnerabilities. FCDO are actively managing their legacy estate via their existing change plans through system upgrades and migration to public cloud.

Question to the Northern Ireland Office:

To ask the Secretary of State for Northern Ireland, what steps he has taken to reduce the cost of fraud in his Department in the last three financial years.

Answered by Steve Baker - Minister of State (Northern Ireland Office)

The Northern Ireland Office reported no cases of fraud or amounts lost due to fraud or error in any of the last three financial years. This is disclosed as part of the Annual Report and Accounts available on GOV.UK.

The Government is determined to uncover fraud in the public sector and is proud of its record. As part of this, the Government established the Public Sector Fraud Authority (PSFA).

In 22/23, the PSFA set a target of delivering £180m of savings to the taxpayer. In fact, the PSFA far surpassed this within the first 12 months by preventing and recovering £311 million. As it enters its second year, the PSFA has a target of achieving £185 million of savings for the taxpayer.

The Government has also announced an additional £34 million to deploy cutting-edge tools and Artificial Intelligence tools to help combat fraud across the public sector, saving £100 million for the public purse. This is in addition to existing partnerships between PSFA and the tech sector.

The Northern Ireland Office has also recently launched a counter Fraud, Bribery and Corruption Policy and Response Plan.