Question to the Department for Science, Innovation & Technology:
To ask His Majesty's Government, following the remarks in November 2023 by the Government Digital Service Chief Information Security Officer that the One Login digital identification system was "indeed carrying a high level of risk", what progress they have made to address any security and technical issues.
These comments are outdated and reflect a view from when the programme was in its infancy in 2023. We have worked to address all these concerns as evidenced by multiple external independent assessments such as the recent Cyber Assessment Framework (CAF) GovAssure process which identified areas of good practice including governance, risk management, assurance, monitoring, incident management and lessons learned. Risk mitigation will continue to be central to our approach to ensure we keep pace with the constantly changing cyber threat landscape.