The UK’s Investigatory Powers Commissioner’s Office (IPCO) has flagged “a very significant number” of General Communications Headquarters (GCHQ) storage drives that have been missing for years and have yet to be found. According to The Register, the lost storage media have been known to GCHQ officials for years now, but they’re still unsure about the scope of the problem.
"I remain concerned that GCHQ has not yet established a sufficiently clear understanding of the scale, location, and recoverability of lost removable media that may contain IPA-related data, notwithstanding that the underlying issues were first drawn to my attention several years ago. While I recognize the technical and practical challenges involved, the passage of time without a comprehensive account heightens the importance of sustained senior focus and assured remediation. Given the potential sensitivity of the material involved, I will continue to monitor progress closely,” investigatory powers commissioner Lord Brian Leveson wrote in the report.
GCHQ acknowledged to The Register that the tracking system for its removable media had been insufficient, but it has since taken steps to prevent it happening in the future. "We recognize the importance of security of removable media in our systems and have a range of measures to mitigate the risks posed by these items. The findings in the report have been addressed comprehensively, and all necessary steps to correct this issue have been taken," a GCHQ spokesperson told the publication. It has also launched a program to help locate as many of the lost storage media as possible and will have an automated asset-tracking system up and running before 2027.
Source link







