Written question asked by Lord Harris of Haringey (Labour), in the House of Lords. It was due for an answer on Tuesday, 11 May 2004. It was answered by Baroness Scotland of Asthal (Labour) on Tuesday, 11 May 2004.

---

Scotland of Asthal, Baroness

Question

Which public sector organisations and which private sector companies the National Infrastructure Co-ordination Centre (NISCC) regards as comprising the United Kingdom Critical National Infrastructure; and how many computers and communications systems the NISCC regards as comprising the Infrastructure; and what is their response and that of the National Infrastructure Co-ordination Centre to attacks by malicious computer software programs in recent years; and in respect of the malicious computer software programs attacks, My Doom, NetSky. and SoBig; (a) how many United Kingdom Critical National Infrastructure (CNI) systems these programs infected; (b) whether the attacks degraded the functioning of the United Kingdom CNI, and if so, in what way; (c) how long it took to remove these programs from United Kingdom CNI systems; and (d) what is their estimate of the fiscal damage (the opportunity loss and the loss of trading) which these programs caused the United Kingdom CNI; and what action they are taking to ensure that the financial component of the United Kingdom Critical National Infrastructure is not placed at increased risk because certain United Kingdom financial organisations have advised their security departments to cease checking for computer system vulnerabilities because of the potential liabilities that may arise if vulnerabilities are identified but not corrected; and how many of the United Kingdom Critical National Infrastructure systems have been subjected to formal vulnerability testing to evaluate their ability to withstand a systematic logical attack by an adversary; and, in those cases: (a) who performed this testing; (b) what were the results; (c) what actions have been taken based on the results; and (d) what actions remain to be taken; and in respect of the National Infrastructure Co-ordination Centre (NISCC); (a) what missions and functions are formally assigned to NISCC; (b) where is NISCC located; (c) what facilities are available for Memebers of both Houses of Parliament to tour NISCC premises and observe the operation; (d) what is the source of NISCC staffing; (e) how many personnel are assigned to NISCC, and what is it's annual budget; (d) whether NISCC's financial and personnel resources are adequate to perform its duties. [HL 2576;HL 2577;HL 2578;HL 2580;HL 2581;HL 2616]. - Inc figures

---

Secondary information

Type

Written question

Reference

661 c18-21WA; HL 2576;HL 2577;HL 2578;HL 2580;HL 2581;HL 2616

Session

2003-04

Subjects

Crime Software Computers Damage Finance ICT Liability Financial institutions Infrastructure Private sector Public sector Location Staff Telecommunications Security Testing Computer viruses National Infrastructure Security Coordination Centre Cybersecurity

Contains statistics

Yes