The Official Report is a written record of public meetings of the Parliament and committees.
All Official Reports of meetings in the Debating Chamber of the Scottish Parliament.
All Official Reports of public meetings of committees.
Displaying 2547 contributions
Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
Is there now physical separation between the main systems data and the organisation’s back-up data? To my mind, that would mean that any further attempts of a similar nature could not succeed.
Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
I thank Jo Green for that answer. David Pirie does not need to tell us about the details. The committee simply wants to be reassured that the back-up strategy is different from, and more secure than, the previous one. As we all know, another phishing email could come in on any day, through which—by clicking, linking, following or whatever—staff could inadvertently provide access to your systems data. I just want to get a sense that that issue has been recognised and that steps have been taken to provide additional protection for SEPA’s systems data.
Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
Auditor General, I want to talk about NHS workforce recovery and connect it to the skills issue. I know that the Government agrees that innovation and service redesign are essential. I go back to the time of your predecessor Robert Black, when I sat on the Public Audit Committee. I think that Colin Beattie was there, too. Robert Black presented a report like yours, in which he said that service redesign was essential. I know that a lot of work has been done since then, but you say in your report that
“there is not enough detail”
in the recovery plan to give us the assurances that we need on achieving the ambitions and the timescales that might apply.
Will you talk a little more about that? What kind of information do we need in the recovery plan to help us to drive the redesign process forward?
10:30Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
Lastly, do you think that we are doing enough to make the public aware that those opportunities are there? Every year that I have been in Parliament, we have identified issues to do with skills. I represent a constituency where the unemployment levels are always higher than those in the rest of Scotland, and in NHS Ayrshire and Arran, we need those skills for the future to help us redesign the service. How are we closing that gap between the skills that are needed in the service and the skills that people have? How are we making opportunities available to local people to fill the gap? We seem to say every year that the gap is still there—how do we close it? Is it strategies, is it documents such as this one or is it workforce planning? How do we reach out to the public to draw them into the services that we need to fill?
Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
What staff support, financial support or other support has SEPA had from the Scottish Government to get through the attack, recover from it and move forward? Other organisations are vulnerable to such attacks, not just SEPA. Have you been able to share your experience with other bodies to make them aware of what might happen and of the actions that you have taken that they might wish to consider implementing?
09:15Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
Can I go back to him?
Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
Hello, David. I cannot see you on screen. I was asking about the back-up strategy and whether you could give the committee some assurance that the back-up procedure that is in place will, as far as possible, make the same type of cyberattack impossible to succeed, and that your back-up data is physically separate from the main systems data.
As I understand it, the hack reached the back-up data first, so you were unable to reinstate your systems. Have you taken steps to make sure that that data separation is physical, so that the back-up data cannot be attacked, should there be a future attack?
Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
Are you content that, should there be another successful cyberattack attempt, the back-up data could not be accessed, encrypted, destroyed, stolen or otherwise?
Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
Is David still online?
Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
Good morning, everybody. Jo Green said that progress has been made on the recommendations—you have implemented 35 out of 44 of them. I want to explore the back-up issue. We know from the previous paperwork that the back-up data was targeted first, which rendered it inoperable, and you could not perform a back-up. Could you tell us about the current back-up situation? Have you addressed that issue through the action that you have taken since then? Is the back-up data now entirely separate from the main systems data?