Government attaches importance to information security
12 - 04 - 2000

The Government implements various measures to keep its information systems secure and to build a safe and secure environment for the community to use information technology (IT).

Speaking at the opening ceremony of an information security showcase today (April 12), the Director of Information Technology Services, Mr Lau Kam-hung, said that the Government was fully aware of the importance of information security.

"All government bureaux and departments have adopted appropriate measures to protect their computer and network systems against intrusion," said Mr Lau.

They are also provided with comprehensive guidelines on information security formulated by the Information Technology Services Department (ITSD).

With a view to further enhancing its capabilities for tackling computer intrusions, ITSD closely monitors and keeps up to date with the local and international trends of computer security attacks and solutions available against such attacks.

The department has also set up a Central Internet Gateway (CIG) system to further strengthen the security of government computer and network systems.

The system enables government bureaux and departments to gain access to the Internet, and to disseminate information and to communicate with the public over the Internet through a secure and centrally managed gateway.

"The CIG has adopted internationally accepted Internet security standards," said Mr Lau.

"It is equipped with state-of-the-art security devices including firewalls, virus detection systems, intrusion detection system, and intrusion recognition and response system which enables responsive action to be taken against intrusion activities," he continued.

ITSD also provides all government bureaux and departments with technical support in tackling computer viruses, and constantly reminds them to execute measures against computer viruses.

Apart from keeping its own information systems secure, the Government also implements measures to build a safe and secure environment for the adoption of IT by the community.

"The Electronic Transactions Ordinance enacted by the Legislative Council in January this year provides a clear legal framework for the conduct of e-commerce," said Mr Lau.

The Public Key Infrastructure (PKI) established by the Government through the Hongkong Post provides a safe and secure environment for the conduct of e-commerce and builds up public confidence in electronic transactions.

"Members of the public and businesses can obtain certification services through the Certification Authority of the Hongkong Post," Mr Lau said.

The private sector is encouraged to set up their own Certification Authorities (CAs) to meet different needs of the community.

CAs which have achieved a trust standard acceptable to the Government may apply to the Director of Information Technology Services for government recognition on a voluntary basis.

The Government has also provided funding support for conducting researches in public key cryptographic technology and developing related software systems.

"The Government will continue to launch promotion events to enhance the knowledge of the general public, particularly the small and medium-sized enterprises, on information security," said Mr Lau.

To strengthen the framework within which law enforcement against computer crime may be carried out, the Government has set up an inter-departmental working group on computer crime.

Chaired by the Security Bureau, the working group will review the adequacy of existing legislation as well as administrative measures dealing with computer crime.

It aims to complete its deliberations and draw up its recommendations in about six months' time.

- END -