Found: OFFICIAL OFFICIAL Baroness Jones of Whitchurch Parliamentary Under Secretary of State

Question to the Department for Science, Innovation & Technology:

To ask His Majesty's Government, further to the Written Answer by Baroness Jones of Whitchurch on 14 May (HL7009), whether the individuals who conducted the risk assessments for the One Login programme held certifications in governance and risk recognised by the UK Cyber Security Council, or an equivalent accreditation; and if not, what steps they have taken to ensure that such assessments meet government and ISO 27001-equivalent standards for competence.

Answered by Baroness Jones of Whitchurch - Baroness in Waiting (HM Household) (Whip)

Yes. Individuals conducting risk assessments for GOV.UK One Login hold professional experience and qualifications aligned to knowledge areas and skills as defined by the UK Cyber Security Council.

Question to the Department for Science, Innovation & Technology:

To ask His Majesty's Government, further to the Written Answer by Baroness Jones of Whitchurch on 14 May (HL7013), whether the Cabinet Office Audit and Risk Committee was formally notified of the letter from the National Cyber Security Centre that warned of shortcomings and risks in the One Login system in September 2023; and if so, on what date they notified that committee; and whether they will place a copy of that letter in the Library of the House.

Answered by Baroness Jones of Whitchurch - Baroness in Waiting (HM Household) (Whip)

Representatives for GOV.UK One Login, attended two meetings into programme risks with the Cabinet Office Audit and Risk Committee (COARC), once in June 2023 and then again in April 2024. On both occasions cyber security risks that took into account NCSC advice were presented. GDS also raised cyber security as its top risk to the Cabinet Office in its quarterly risk reporting, a process which is now replaced by DSIT risk reporting.

A copy of the letter will not be placed in the Library of the House, as it forms part of ongoing security measures and internal governance processes.

Found: A★_ Baroness Jones of Whitchurch to move, That this House do not insist on its Amendment 49F, to which

Found: Clause 54 BARONESS JONES OF WHITCHURCH 200B_ Clause 54, page 72, line 16, at end insert— “(10A) But

Found: trusting that this Reason may be deemed sufficient. 3 Data (Use and Access) Bill [HL] A_ Baroness Jones of Whitchurch

Found: BARONESS JONES OF WHITCHURCH 215C_ Schedule 6, page 219, line 12, leave out “after “19F(5)” insert “

Found: Bill 179, the Bill as first printed for the Commons] COMMONS AMENDMENT 49 Clause 137 _ Baroness Jones of Whitchurch

Found: Taylor of Stevenage Nil Return Nil Return Nil Return Nil Return Nil Return Nil Return Baroness Jones of Whitchurch

Found: Return Baroness Taylor of Stevenage Nil Return Nil Return Nil Return Nil Return Nil Return Baroness Jones of Whitchurch

Found: Return Justin Madders Nil Return Nil Return Nil Return Nil Return Nil Return Nil Return Baroness Jones of Whitchurch

Found: Return Nil Return Justin Madders Nil Return Nil Return Nil Return Nil Return Nil Return Baroness Jones of Whitchurch

Found: Return Feryal Clark Nil Return Nil Return Nil Return Nil Return Nil Return Nil Return Baroness Jones of Whitchurch

Found: Return Nil Return Nil Return Nil Return Department for Science, Innovation and Technology Baroness Jones of Whitchurch