Home›Questions on Notice›QoN 3796

❓ WA Parliamentary Question on Notice regarding penetration testing of government agencies' network systems and websites. Several agencies performed penetration tests, some including social engineering, while others did not.

AnsweredQoN 3796Legislative Assembly

Asked

14 August 2018

Member

Mr Z.R.F. Kirkup

Portfolio

Local Government; Heritage; Culture and the Arts

QuestionView source ↗

For all departments, agencies, government trading enterprises or boards within the Minister’s portfolio responsibilities, I ask since 11 March 2017: (a) Have any independent consultants or companies been engaged to run penetration or 'White Hat' tests on any internal or external network systems: (i) If so, what consultant or company was engaged and on what date; (ii) If so, did it include any social engineering or phishing tests; and (iii) If not, why not; and (b) Have any independent consultants or companies been engaged to run penetration or 'White Hat' tests on any websites: (i) If so, what consultant or company was engaged and on what date; and (ii) If so, what website (domain only) was tested?

AnswerView source ↗

Answered

18 September 2018

Responded by

Minister for Local Government; Heritage; Culture and the Arts

Response time

9 days

Department of Local Government, Sport and Cultural Industries (including the Culture and Arts Portfolio Statutory Authorities)
(a)   Yes
(i) Asterisk, 11/7/2017
(ii)   No
(iii) The focus of the assessment was to do a general health check for all ICT infrastructure and systems that DLGSC has inherited.
(b)   No
Metropolitan Cemeteries Board
(a) Yes
(i) Ernest and Young, Jan 2017 to 21 March 2017
(ii) Yes (Social Engineering)
(b) No
National Trust of Western Australian
(a-b) No
Former State Heritage Office
(a-b) No
Department of Planning, Lands and Heritage
(a-b) Please refer to Legislative Assembly question on notice 3802
Heritage Council of Western Australia
(a-b) No

View on Parliament of WA