Information security crucial to e-commerce
15 - 09 - 2000

Information security is crucial to the development of e-commerce in Hong Kong.

Speaking at the "Hacking in the Real World" Seminar today (September 15), the Director of Information Technology Services, Mr Lau Kam-hung said,"Information security enhances the public's confidence in electronic transactions, and is vital for the development of e-commerce in Hong Kong."

"The Government has been implementing effective measures to provide a safe and secure environment for the conduct of electronic transactions in Hong Kong," he said.

Mr Lau noted that the Electronic Transactions Ordinance provided a clear legal framework that built the public's confidence in adopting electronic transactions in Hong Kong.

Under the Ordinance, electronic records and digital signatures are given the same legal status as that of their paper-based counterparts and a framework to promote and facilitate the operation of Certification Authorities (CAs) is also established.

"To enable electronic transactions to be conducted in a safe and secure environment, the Government has established the Public Key Infrastructure (PKI) through the Hongkong Post which started to provide public CA services in January this year," said Mr Lau.

"PKI enables us to authenticate the identities of the parties involved, to ensure the integrity and confidentiality of the messages exchanged, and to make sure the transactions cannot be repudiated," he added.

The private sector is free to set up more CAs to meet different needs in the community. CAs may apply to the Director of Information Technology Services for government recognition in accordance with the voluntary certification authority recognition scheme.

The Government has also set up an inter-departmental working group on computer crime to strengthen the framework within which law enforcement against computer crime may be carried out.

The working group, chaired by the Security Bureau, will review the adequacy of existing legislation as well as administrative measures dealing with computer crime.

It aims to complete its deliberations and draw up its recommendations by the end of this year.

As part of its continuous efforts to promote the awareness of information security to different sectors of the community, the Information Technology Services Department (ITSD) has organised together with different organisations a number of seminars and exhibitions to disseminate the latest information on information security.

Mr Lau said, "To enhance the public's knowledge on computer virus, ITSD has uploaded onto its web page (http://www.infosec.gov.hk/english/virus/virus.html) the up-to-date information on computer viruses and the trial/evaluation copy of anti-virus utilities for public reference and free downloading."

"ITSD also closely monitors the latest development of information security issues both locally and internationally, and formulates corresponding guidelines to enhance its capability in handling such incidents," he continued.

The information security guidelines are available at the InfoSec web site (http://www.infosec.gov.hk).

Recently, ITSD has published two leaflets containing information on effective and proper computing practices to guard against computer viruses and to keep computers secure respectively for free public collection.

The leaflets have also been uploaded onto the ITSD web site (http://www.itsd.gov.hk/itsd/eng/pubpress/epubdoc.htm) for public reference and free downloading.

- ENDS -