Home›Questions on Notice›QoN 3107

❓ A WA parliamentary question investigates whether government agencies were affected by a Cisco Smart Install cyber-attack and if the vulnerable feature was still in use. Most agencies reported no impact, but ICWA confirmed usage with a plan to disable it.

AnsweredQoN 3107Legislative Assembly

Asked

12 June 2018

Member

Mr Z.R.F. Kirkup

Portfolio

Treasurer; Minister for Finance; Energy; Aboriginal Affairs

QuestionView source ↗

In respect of the Minister’s portfolio responsibilities for any departments, agencies, government trading enterprises or boards I ask, noting the statement made by the Australian Cyber Security Centre on 17 April 2018 in relation to the malicious targeting of Cisco devices using the Smart Install feature: (a) Were any devices in the agency affected by this attack: (i) If so, what was the nature of the cyber-attack and what information held by the agency was unlawfully accessed; and (b) Is the Cisco Smart Install feature still in use by the agency as at 1 June 2018: (i) If so, why?

AnswerView source ↗

Answered

14 August 2018

Response time

9 days

Department of Treasury
(a) No
(i) Not applicable
(b) No
(i) Not applicable
Department of Finance
(a) No
(i) Not applicable
(b) No
(i) Not applicable
Western Australia Treasury Corporation
(a) No
(i) Not applicable
(b) No
(i) Not applicable
Economic Regulation Authority
(a) No
(i) Not applicable
(b) No
(i) Not applicable
Department of Planning, Lands and Heritage
Please refer to the answer to Legislative Assembly Question on Notice 3104.
Aboriginal Policy and Coordination Unit
Please refer to the answer to Legislative Assembly Question on Notice 3117.
Western Power
(a) No
(i) Not applicable
(b) No
(i) Not applicable
Synergy
(a) No
(i) Not applicable
(b) No
(i) Not applicable
Horizon Power
(a) No
(i) Not applicable
(b) No
(i) Not applicable
Government Employees Superannuation Board
(a) No
(i) Not applicable
(b) No
(i) Not applicable
Fire and Emergency Services Superannuation Fund
(a) No
(i) Not applicable
(b) No
(i) Not applicable
Insurance Commission of Western Australia
(a) No
(b) Yes
(i) The Cisco Smart Install feature was on two Cisco devices at 1 June 2018. The two devices had the Smart Install feature disabled on 12 June 2018 as part of a planned change process.
Office of the Auditor General
(a) No
(i) Not applicable
(b) No
(i) Not applicable

View on Parliament of WA