Question NW3781 to the Minister of Home Affairs
24 November 2023 - NW3781
Roos, Mr AC to ask the Minister of Home Affairs
Concerning vulnerability assessments and penetration tests on the Home Affairs information technology systems conducted by the Home Affairs Internal Audit Unit, what are the (a) exact dates on which (i) internal and (ii) external assessments were conducted in the period 1 January 2021 up to the latest specified date in 2023 for which information is available and (b) full and relevant details of the outcomes?
Reply:
The Vulnerability assessment and penetration tests reviews were conducted as follows at the Department of Home Affairs:
a) Exact dates
(i) Internal assessments
Internal Audit conducted internal assessment in 2021/2022 financial year and the report was issued on 23 February 2022.
(i) External assessments
Internal Audit conducted external assessment in 2020/2021 financial year and the report was issued on 07 December 2020 and also conducted internal and external assessments in 2022/2023 financial year and report was issued on 24 July 2023.
The outcomes of the assessments and tests contains sensitive information which can compromise IT security architecture and can lead to cyber-attacks because it details actions taken in different environments.
END