Government creates secure e-business environment
26 - 09 - 2003

The Government has built a legal framework and implemented various initiatives to establish a secure e-business environment in Hong Kong, the Deputy Director of Information Technology Services, Mr Stephen Mak Hung-sung, said today (September 26).

Speaking at the"Internet Law in Hong Kong" symposium organised by the Institution of Electrical Engineers Hong Kong, Mr Mak said the rapid development in the use of the Internet for e-business had raised concerns in information security, including fraud, data privacy, viruses, worms and spamming.

The Government has launched various initiatives to create a favourable environment for e-business. One of the measures is to establish a clear and conducive legal framework that facilitates electronic transactions.

Under the Electronic Transactions Ordinance which was enacted in January 2000, electronic records and digital signatures enjoy the same legal status as their paper-based counterparts, thus enhancing certainty and security for e-business transactions, he said.

The ordinance also provides a framework for the voluntary recognition scheme for certification authorities.

On the issue of cyber crime, the Government is taking measures to take forward the recommendations of a report produced by an inter-departmental working group to enhance the legal framework concerning computer crime.

To develop Hong Kong into a secure and reliable e-community, providing up-to-date information and adequate public education on information security is important. The Government has set up the Infosec (www.infosec.gov.hk) website last year to provide public access to resources and updates on information security.

In addition, radio and TV programmes, posters and leaflets have been produced to raise security awareness and to promote ethics.

There is also a helpdesk service for the public on information security matters. The establishment of the Hong Kong Computer Emergency Response Team Co-ordination Centre in February 2001 has greatly enhanced Hong Kong's capability to respond to information security incidents and access relevant information.

The centre plays a co-ordination role in the reporting, response and handling of information security incidents. It issues security and computer virus alerts and handles security incidents reported by the local community.

Mr Mak said that the Government had been closely monitoring the local situation regarding junk fax and e-mail spamming. Possible measures are being considered to combat the problem in consultation with the industry, but the Government will strike a balance in introducing any regulatory measure in order not to stifle legitimate business activities.

On security measures within the Government, Mr Mak said there was already a comprehensive government-wide information technology (IT) security policy which ensured that sufficient and effective measures were put in place to protect the Government's information systems.

The Information Security Management Committee and the Government Information Security Incident Response Office were set up to oversee IT security implementation and advise bureaux and departments on IT security issues.

"We have taken steps to combat threats related to IT security and computer viruses by continually monitoring the development of IT security related vulnerabilities," he said.

Looking ahead, Mr Mak said the Government was reviewing the Electronic Transactions Ordinance to ensure that Hong Kong had the most up-to-date legislative framework to support e-business development. The Electronic Transactions (Amendment) Bill 2003 was submitted to the Legislative Council this June.

The signing of the Closer Economic Partnership Arrangement between the Mainland and Hong Kong has further highlighted the need for a cross-border perspective. Co-operation among certification authorities in different jurisdictions is important for using digital certificates across the border.

Local businesses and organisations have established the Hong Kong Public Key Infrastructure Forum to foster collaboration among certification authorities both within and outside Hong Kong.

Hongkong Post has signed memoranda of understanding with individual certification authorities in the Mainland, Korea, Singapore and Malaysia. Another local certification authority has also allied with its partners in Asia to promote co-operation.

Mr Mak said that the Government was actively participating in the Asia-Pacific Economic Co-operation in its efforts to enhance interoperability of certification services among member economies.

Appropriate measures to facilitate secure electronic communication and transactions would continue, he said.

- END -