Home›Questions on Notice›QoN 3115

❓ A WA parliamentary question sought information on the impact of a Cisco Smart Install vulnerability on agencies within the Education and Training portfolio. Most agencies reported no impact and disuse of the feature, while Central Regional TAFE indicated the feature was enabled but not utilized and would be disabled.

AnsweredQoN 3115Legislative Assembly

Asked

12 June 2018

Member

Mr Z.R.F. Kirkup

Portfolio

Education and Training

QuestionView source ↗

In respect of the Minister’s portfolio responsibilities for any departments, agencies, government trading enterprises or boards I ask, noting the statement made by the Australian Cyber Security Centre on 17 April 2018 in relation to the malicious targeting of Cisco devices using the Smart Install feature: (a) Were any devices in the agency affected by this attack: (i) If so, what was the nature of the cyber-attack and what information held by the agency was unlawfully accessed; and (b) Is the Cisco Smart Install feature still in use by the agency as at 1 June 2018: (i) If so, why?

AnswerView source ↗

Answered

14 August 2018

Responded by

Minister representing the Minister for Education and Training

Response time

9 days

DEPARTMENT OF EDUCATION
DEPARTMENT OF TRAINING AND WORKFORCE DEVELOPMENT
NORTH METROPOLITAN TAFE
SOUTH METROPOLITAN TAFE
NORTH REGIONAL TAFE
SOUTH REGIONAL TAFE
BUILDING CONSTRUCION INDUSTRY TRAINING FUND
(a) No
(i) Not applicable.
(b) No
(i) Not applicable.
CENTRAL REGIONAL TAFE
(a) No
(i) Not applicable.
(b) This feature is enabled by default on all new Cisco switches, howev,er it is not utilised by Central REgional TAFE. This feature will be disabled on all Cisco switches by 31 July 2018.

View on Parliament of WA