Question

To ask the Secretary of State for Digital, Culture, Media and Sport, if she will publish details of (a) independent security audits, (b) data protection assessments and (c) assurance reviews conducted in relation to GOV.UK One Login since its launch; and what assessment she has made of the potential impact of reports of security concerns on public confidence in the programme.

GOV.UK One Login’s delivery is tightly governed through departmental controls, HM Treasury oversight and independent assurance by the National Infrastructure and Service Transformation Authority (NISTA) as part of the Government Major Projects Portfolio (GMPP). GOV.UK One Login is also certified under the UK Digital Verification Services Trust Framework.

The Government does not routinely publish audit reports, as these contain sensitive information relating to the security and operation of government systems.