The ICAC has launched a new set of integrity assurance standards for government computer systems, featuring 12 core control measures designed to enhance system security and track irregular activity.

Starting in July, government bureaus and departments must perform a self-assessment against these standards whenever applying for funding to purchase new computer systems.

Officiating at the unveiling ceremony on Wednesday, ICAC Commissioner Danny Woo said the watchdog had consulted with academics and the Digital Policy Office to ensure the guidelines are as practical and relevant as possible.

"To give a few examples, we have introduced user authentication and clearly defined permissions to prevent unauthorised access to confidential information," he said.

"We've also integrated conflict-of-interest declarations and approval processes directly into the system to ensure critical steps aren't skipped or overlooked."

"On top of that, we've added access logs, anomaly detection, and automated alerts to help departments catch suspicious incidents early."

Woo stressed that implementing measures outlined in the standards are necessary investments to enhance the departments’ overall efficiency.

In the long-term, this approach can reduce the likelihood of corruption, sparing substantial costs for ICAC investigations and system repairs, while minimising the risk of public relation crises, he added.

Acting Secretary for Innovation, Technology and Industry Lillian Cheong, for her part, said the government has always put safety and development on an equal footing.

The standards, she said, provide ICAC additional tools to support its core value of upholding integrity governance.




Edited by Wendy Wong