Government measures to ensure information security
01 - 04 - 2000

The Government keeps its information system secure and makes strenuous effort in building a safe and secure environment for the conduct of electronic transactions in Hong Kong.

Speaking in a seminar on security and hacking jointly organised by the Information Technology Services Department (ITSD) and the Hong Kong Computer Society today (April 1) to promote the awareness of information security, the Director of Information Technology Services, Mr Lau Kam-hung, said that the Government maintained a team of specialists to deal with issues on information security.

"All government bureaux and departments have adopted appropriate measures to protect their computer and network systems against intrusion," said Mr Lau.

To further strengthen the security of government information systems, ITSD has just set up the Central Internet Gateway (CIG) system.

The CIG system enables government bureaux and departments to gain access to the Internet, and to disseminate information and to communicate with the public over the Internet through a secure and centrally managed gateway.

"The CIG has adopted internationally accepted Internet security standards, and will protect the government bureaux and departments by means of firewalls, virus detection systems, and proactive intrusion detection systems," said Mr Lau.

"To keep in pace with the ever changing cyber world, we will also conduct regular reviews on our security systems in line with the latest development of the Internet technology," he continued.

Apart from the security of its own information systems, the Government is also fully aware of the importance of building a safe and secure environment for the community to conduct electronic transactions.

The Government has implemented the Public Key Infrastructure (PKI) through the Hongkong Post to build up public confidence in electronic transactions.

"With the PKI, a framework is built for authenticating the identity of the participants in performing electronic transactions," said Mr Lau.

Within this framework, the Certification Authority of the Hongkong Post offers flexible certification services to meet different requirements of the community.

Certification Authorities (CAs) set up by the private sector may apply for government recognition on a voluntary basis, but only those CAs which have achieved a trust standard acceptable to the Government and have adopted a common and open interface in their operation will be granted the recognition.

The Government has also provided funding support for conducting researches in public key cryptographic technology.

Despite the foundation laid by the Government for building a safe and secure environment for the conduct of electronic transactions, it is difficult to completely prevent criminals from taking advantage of the advanced technology to commit crimes.

"In view of the unique nature of computer crime, an inter-departmental working group of the Government, chaired by the Security Bureau, will review the adequacy of existing legislation as well as administrative measures dealing with computer crime," said Mr Lau.

The working group aims to complete its deliberations and draw up its recommendations in about six months' time.

Mr Lau noted that the Government would continue to launch promotion events such as exhibitions and seminars to arouse the awareness of the general public, particularly the small and medium-sized enterprises, on computer and Internet security.

- END -