<!--The Official Report of Parliamentary Debates (Hansard) of the Legislative Council and the House of Assembly of the Parliament of South Australia are covered by parliamentary privilege. Republication by others is not afforded the same protection and may result in exposure to legal liability if the material is defamatory. You may copy and make use of excerpts of proceedings where (1) you attribute the Parliament as the source, (2) you assume the risk of liability if the manner of your use is defamatory, (3) you do not use the material for the purpose of advertising, satire or ridicule, or to misrepresent members of Parliament, and (4) your use of the extracts is fair, accurate and not misleading. Copyright in the Official Report of Parliamentary Debates is held by the Attorney-General of South Australia.-->
<hansard id="" tocId="" xml:lang="EN-AU" schemaVersion="1.0" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:xsi="http://www.w3.org/2007/XMLSchema-instance" xmlns:mml="http://www.w3.org/1998/Math/MathML" xsi:noNamespaceSchemaLocation="hansard_1_0.xsd">
  <name>Legislative Council</name>
  <date date="2018-07-24" />
  <sessionName>Fifty-Fourth Parliament, First Session (54-1)</sessionName>
  <parliamentNum>54</parliamentNum>
  <sessionNum>1</sessionNum>
  <parliamentName>Parliament of South Australia</parliamentName>
  <house>Legislative Council</house>
  <venue></venue>
  <reviewStage>published</reviewStage>
  <startPage num="815" />
  <endPage num="861" />
  <dateModified time="2022-08-06T14:30:00+00:00" />
  <proceeding continued="true">
    <name>Answers to Questions</name>
    <subject>
      <name>Cybersecurity</name>
      <text id="20180724f1b0c07ffe23498d90000787">
        <inserted>
          <heading>Cybersecurity</heading>
        </inserted>
      </text>
      <talker role="member" id="3122" kind="question">
        <name>The Hon. I.K. HUNTER</name>
        <house>Legislative Council</house>
        <questions>
          <question date="2018-07-24">
            <name>Cybersecurity</name>
          </question>
        </questions>
        <text id="20180724f1b0c07ffe23498d90000788">
          <inserted>In reply to <by role="member" id="3122">the Hon. I.K. HUNTER </by>(7 June 2018).  </inserted>
        </text>
      </talker>
      <talker role="member" id="3164" kind="answer">
        <name>The Hon. S.G. WADE</name>
        <house>Legislative Council</house>
        <electorate id="">Minister for Health and Wellbeing</electorate>
        <questions>
          <question date="2018-07-24">
            <name>Cybersecurity</name>
          </question>
        </questions>
        <text id="20180724f1b0c07ffe23498d90000789">
          <inserted>
            <by role="member" id="3164">The Hon. S.G. WADE (Minister for Health and Wellbeing):</by>  I have been advised:</inserted>
        </text>
        <text id="20180724f1b0c07ffe23498d90000790">
          <inserted>In relation to the possible data breach in the PageUp recruitment system, SA Health is satisfied that the incident has been contained and is being independently investigated. </inserted>
        </text>
        <text id="20180724f1b0c07ffe23498d90000791">
          <inserted>The PageUp company has engaged multiple independent security vendors to assist in understanding the scope, impact and consequence of the incident. They have also engaged the Australian Cyber Security Centre (ACSC) and the Australian Federal Police. PageUp has also notified the Office of the Australian Information Commissioner (OAIC). In a joint statement from OAIC, ACSC and IDCare, it was stated that no Australian information may actually have been stolen.</inserted>
        </text>
        <text id="20180724f1b0c07ffe23498d90000792">
          <inserted>While the investigation is ongoing, there is currently no evidence that any SA Health job applicants have had their data breached. As part of the communication strategy for incident handling, a notice has been placed on SA Health's career website keeping employees and applicants informed of developments with the PageUp incident. If needed, these notices can serve as supporting documentation if a person wishes to apply for a commonwealth victims' certificate. Response to the incident has been centrally coordinated by CERT Australia, which is the Australian Government's national Computer Emergency Response Team (CERT).</inserted>
        </text>
        <text id="20180724f1b0c07ffe23498d90000793">
          <inserted>As part of its own response to the potential breach SA Health is engaging with CERT Australia. Along with SA government's chief information security officer, SA Health is regularly briefed by the Joint Cyber Security Centre under CERT Australia and PageUp.</inserted>
        </text>
      </talker>
    </subject>
  </proceeding>
</hansard>