(2) how many successful attempts were made to gain unauthorised access to each (a) database and (b) ICT system run by his Department in 2008-09; and if he will make a statement.
It is not in the interests of the UK’s national security for Departments to confirm information on the number of attempts, successful or otherwise, to gain unauthorised access to departmental systems or databases. Such disclosure could undermine the integrity and security of departmental systems and thereby expose them to potential threats.
HM Treasury is bound by the mandatory requirements of the Security Policy Framework in relation to information security, including managing the risk of unauthorised access to ICT systems.