❓ A WA parliamentary question investigates the use of Kaspersky Lab antivirus software within government agencies, prompted by US cybersecurity concerns. The responses indicate limited direct use, reliance on a vendor using Kaspersky as one of many engines, and adherence to Australian cybersecurity advice.
AnsweredQoN 3134Legislative Assembly
Asked
12 June 2018
Member
Portfolio
Premier; Minister for Public Sector Management; State Development, Jobs and Trade; Federal-State Relations
QuestionView source ↗
In respect of the Minister’s portfolio responsibilities for any ministerial office, departments, agencies, government trading enterprises or boards I ask, whether any information security products (i.e. antivirus software) by AO Kaspersky Lab are in use, and if yes: (a) What products are in use (i.e. Kaspersky Anti-Virus, Kaspersky Endpoint Security Cloud); (b) Do any of these computers store, or transmit confidential or sensitive information; (c) What is the annual cost of subscribing to these products; and (d) Noting the United State's Department of Homeland Security's issuance of Binding Operational Directive 17-01 ordering agencies in that nation to discontinue use of this software due to cyber-security concerns, why is this software still in use?
AnswerView source ↗
Answered
14 August 2018
Response time
9 days
GoldCorp
Gold Corporation does not use information security products from AO Kaspersky Lab.
Lotterywest
Lotterywest does not use any information security products by AO Kaspersky Lab.
Premier and Cabinet
(a) The Department does not directly utilise AO Kaspersky Lab products. There is however an independent security vendor technology used by the Department that uses dozens of different security engines to reference anti-malware signatures, Kaspersky being one such engine.
(b) The Department’s policy prohibits the storage or transmission of sensitive and/or confidential information through the services, which could utilise Kaspersky components. These services are only used as pass-through for malware detection and in the event this policy was violated, it would not present any material risk of the loss of confidentiality.
(c) The Department does not subscribe directly to AO Kaspersky Lab products.
(d) Australian Federal and State Agencies are not bound by security directives from the U.S.A. Department of Homeland Security. At this time, the Australian Federal Government through the Australian Cyber Security Centre, has yet to reach a determination on advice to Federal and State Agencies on the use of AO Kaspersky Lab products.
Public Sector Commission
(a)-(d) Please refer to the Department of Premier and Cabinet Response, as they are the service provider to the Commission.
Salaries and Allowances Tribunal
(a) Please refer to the response of the Department of the Premier and Cabinet, which is the Tribunal's ICT service provider.
(b) Use of email and unsecured internet applications to transmit sensitive or confidential material is prohibited under the ICT Security & Acceptable Use Policies.
(c) The Tribunal does not subscribe directly to AO Kaspersky Lab products.
(d) N/A.
State Development, Jobs and Trade
No.
(a)-(d) Not applicable.
Gold Corporation does not use information security products from AO Kaspersky Lab.
Lotterywest
Lotterywest does not use any information security products by AO Kaspersky Lab.
Premier and Cabinet
(a) The Department does not directly utilise AO Kaspersky Lab products. There is however an independent security vendor technology used by the Department that uses dozens of different security engines to reference anti-malware signatures, Kaspersky being one such engine.
(b) The Department’s policy prohibits the storage or transmission of sensitive and/or confidential information through the services, which could utilise Kaspersky components. These services are only used as pass-through for malware detection and in the event this policy was violated, it would not present any material risk of the loss of confidentiality.
(c) The Department does not subscribe directly to AO Kaspersky Lab products.
(d) Australian Federal and State Agencies are not bound by security directives from the U.S.A. Department of Homeland Security. At this time, the Australian Federal Government through the Australian Cyber Security Centre, has yet to reach a determination on advice to Federal and State Agencies on the use of AO Kaspersky Lab products.
Public Sector Commission
(a)-(d) Please refer to the Department of Premier and Cabinet Response, as they are the service provider to the Commission.
Salaries and Allowances Tribunal
(a) Please refer to the response of the Department of the Premier and Cabinet, which is the Tribunal's ICT service provider.
(b) Use of email and unsecured internet applications to transmit sensitive or confidential material is prohibited under the ICT Security & Acceptable Use Policies.
(c) The Tribunal does not subscribe directly to AO Kaspersky Lab products.
(d) N/A.
State Development, Jobs and Trade
No.
(a)-(d) Not applicable.
Explore WA Government Data
Search the full archive in the free dashboard, or query programmatically via API.
Explore more
Government Gazette
Appointments, regulatory notices, planning changes.
Hansard
Debates, questions, speeches and sentiment.
Tabled Papers
Reports and documents tabled in Parliament.
Committees
Committee profiles and recent reports.
Regulations
Subsidiary legislation with filters and summaries.
Bills
Proposed laws and parliamentary progress.
Acts
Current WA legislation and summaries.
Explanatory Memoranda
Bills with EMs (text/PDF) available.
Members
MP profiles, party breakdown and rankings.
Pollie Rankings
Data-driven rankings across 19 categories.
Amendment Chains
Track how schemes and regulations evolve over time.