Parliamentary Search

Written question asked by Lord Clement-Jones (Liberal Democrat) on Monday, 11 December 2023, in the House of Lords. It was due for an answer on Wednesday, 27 December 2023. It was answered by Lord Sharpe of Epsom (Conservative) on Wednesday, 20 December 2023 on behalf of the Home Office.

Home Office: Amazon Web Services

Question

To ask His Majesty's Government what, if any, security vetting is required for Amazon Web Service staff to handle Home Office data under the contract for the supply of cloud computing services agreed between the two on 30 November.

Answer

The supplier shall be required to comply with data protection legislation, together with specific confidentiality, data protection and data security obligations to protect Home Office data when required, including physical and logical security restrictions applicable to the supplier’s personnel from accessing and processing the Home Office’s data, in accordance with the AWS Security Standards.

This may include vetting to recognised standards when the specific work requires such clearance. The Home Office use “keys” which ensure its data is fully encrypted at rest and in-transit, such that AWS have no access.

Secondary information

Type
Written question
Reference
HL1046
Session
2023-24
Subjects
Contracts Home Office Vetting Security Amazon Web Services
Link
View this Written question on www.parliament.uk