Information security vital to development of e-business
30 - 10 - 2002

Information security is an important pillar to support the fast pace with which the e-business environment needs to develop in Hong Kong.

The Government attaches much importance to information security and is committed to facilitating the development of a reliable and secure environment for e-business to prosper.

Speaking at the e-Security Conference 2002 Hong Kong today (October 30), the Acting Director of Information Technology Services, Mr Stephen Mak Hung-sung, told his audience about various Government initiatives to help drive the adoption of secure e-business.

One of these initiatives makes use of advanced information security technologies, that is the replacement of some seven million identity (ID) cards with Multi-Application Smart ID Cards (MASC) in 2003.

Mr Mak said, "The MASC employs sophisticated crytographic techniques so as to protect users' data and to ensure that it cannot be fraudulently altered or accessed by unauthorised parties."

"It will provide a secure platform to facilitate the development of E-government and e-business."

"The cardholders can also opt for a free digital certificate to be embedded in the card, which will enable them to conduct electronic transactions in a secure manner over the open network," he said.

Information security cannot be effective without the concerted efforts and support from the private sector and the community. The Government is therefore dedicated to enhancing the public's awareness and knowledge on information security through promotional activities such as exhibitions, seminars and conferences, and the distribution of publicity leaflets and posters.

Mr Mak said, "We have also recently set up a new Internet web site (http://www.infosec.gov.hk) with a view to providing a one-stop portal to enhance the public's access to various information security-related resources and updates."

Since 1998 when the first Digital 21 IT Strategy was launched, the Government has made substantial progress on information security-related initiatives.

The Electronic Transactions Ordinance which was enacted in January 2000 provides a clear legal framework to support the conduct of e-business.

In view of the fast changing environment in the e-business area, the Government completed a public consultation in April this year to review the Ordinance. Having received an encouraging feedback of 40 submissions, the Government is now working on the proposed enhancement to the Ordinance.

Apart from the legal framework, the Government has established a security architectural framework through the provision of the Public Key Infrastructure and the Voluntary Recognition Scheme for Certification Authorities that greatly improve the public's confidence in conducting electronic transactions.

Including the first Recognized Certification Authority (RCA) established by the Hongkong Post in January 2000, there are now four RCAs operating in Hong Kong, providing the public with the choice and flexibility of services to different e-business requirements.

Mr Mak also noted that the Government had facilitated the establishment in February 2001 the Hong Kong Computer Emergency Response Team Co-ordination Centre which had greatly enhanced Hong Kong's capability to respond to information security incidents.

- END -