SRC lacks back-up for State staff salary data


Economy

SRC lacks back-up for State employees wage knowledge


NancyGathungu2610m

Auditor Common Nancy Gathungu. PHOTO | LUCY WANJIRU | NMG

edwinmutai_img

Abstract

  • Delicate knowledge on civil servants held by the Salaries and Remuneration Fee (SRC) are vulnerable to loss attributable to lack of a back-up system, officers have mentioned.
  • The SRC, which handles delicate knowledge comparable to remuneration and advantages of all public and State officers, has been permitting its senior officers to hold pc storage gadgets residence.

Delicate knowledge on civil servants held by the Salaries and Remuneration Fee (SRC) are vulnerable to loss attributable to lack of a back-up system, officers have mentioned.

The SRC, which handles delicate knowledge comparable to remuneration and advantages of all public and State officers, has been permitting its senior officers to hold pc storage gadgets residence, exposing the knowledge to losses because of onerous drive failures, ransomware assaults, human error, or theft by criminals.

Such knowledge losses are often mitigated by backup programs which might be in a safe and separate location from an unique holding system, comparable to a cloud.

SRC chief govt officer Anne Gitau instructed a parliamentary committee yesterday that the administrators of the fee had opted to hold residence onerous disk drives for safekeeping each day.

“We at the moment enable each director to go residence with a tough disk of knowledge they’ve of their workplace computer systems,” Ms Gitau instructed the Public Accounts Committee (PAC) of the Nationwide Meeting.

“We have now purchased massive onerous disks of Sh15,000 every which they carry residence and again to the workplace every single day. They carry them residence of their baggage each night. That’s the state of affairs Mr chairman.”

Ms Gitau mentioned the SRC has been unsuccessful in its push for a Sh100million funding by the Treasury to buy an offsite knowledge backup system.

“We have now requested the Treasury for the funds however now we have been unable to obtain the funding,” she instructed the committee chaired by Ugunja MP Opiyo Wandayi.

Auditor-Common Nancy Gathungu had raised concern concerning the SRC working with no knowledge backup and restoration system.

“Though administration has commenced engagements with the Kenya Income Authority (KRA) with the target of securing an offsite backup and knowledge restoration website, no formal settlement has been signed as at June 30, 2020. Consequently, the fee is vulnerable to data loss within the occasion of a catastrophe at its premises,” Ms Gathungu mentioned in an audit report.

The SRC’s revelation comes at a time circumstances of cybercrime are on the rise, with companies dropping billions of shillings and delicate data to hackers.

Knowledge by the Communications Authority of Kenya (CA), for instance, present that cyber assaults on Kenyan organisations rose by almost 50 % within the final three months of 2020 in comparison with the same interval the earlier yr.



Source link