Government data being held by 'unvetted third parties' - Treasury report

Government data being held by 'unvetted third parties' - Treasury report

The GCSB spy agency has taken six times longer than it should have to address questions about lax cyber security identified in a Treasury report - and then refused to answer most of them.

GCSB delays cyber security disclosure as Treasury flags third-party risks

The GCSB has apologised for taking six times longer than legally required to respond to questions about cyber security concerns raised in a Treasury report, ultimately refusing to provide most details. The report warned that government data was being handled by unvetted third parties and highlighted ongoing issues with vendor security, including weak controls, unpatched systems, and offshore data management without approval. It also pointed to s…