Companies: Directors
The question
To ask the Secretary of State for Business and Trade, what assessment he has made of the risk of cyber-security breaches affecting personal data collected through the Companies House identity verification regime.
Answered by Blair McDougall
Companies House has assessed the cyber security risks associated with the identity verification process as part of its wider risk management framework. Any consequences to the agency's exposure to cyber threats and data risks resulting from the introduction of identity verification are actively managed through a robust risk management framework and appropriate security controls including annual assessments as part of the Cabinet Office Departmental Security Health Check (DSHC).
Companies House's digital infrastructure is continually monitored and assessed via a dedicated Security Operations Centre, supplemented by penetration testing of services and infrastructure, suitable supplier assurance, and certification to ISO 27001.
Verbatim has judged this answer against the question that was actually asked — answered, partly answered, or evaded. Sign in to see the verdict →