******************************************

Following is a question by the Hon Lau Hon-chuen and a reply by the Acting Secretary for Information Technology and Broadcasting, Mrs Rita Lau, in the Legislative Council today (Wednesday):

Question :

On 26 April this year, a computer virus known as "Chernobyl" attacked and severely damaged computer systems all over the world. It is reported that the computer systems of five government departments in Hong Kong were also affected. In this connection, will the Government inform this Council:

(a) of the department which is responsible for examining and formulating measures to prevent viruses from infecting important computerised information systems and databases of government departments; and the specific measures formulated by the department for guarding against computer viruses;

(b) whether it will formulate long-term measures to prevent viruses from infecting computer systems in the wake of this incident; if so, the details of such measures; and

(c) whether it will consider providing free anti-virus software and guidelines for small and medium enterprises on a regular basis so as to ensure the normal operation of their computer systems?

Reply :

Madam President,

(a) All government departments have the responsibilities to ensure the normal operation of their computer systems, including the adoption of appropriate measures to prevent their computer systems from being affected by viruses. The Information Technology Services Department (ITSD) provides technical support in this regard and provides from time to time information on computer viruses and preventive measures against virus attacks to be taken for government departments. Specific preventive measures include:

(i) To remind departments to install in their computer systems and computer network systems with anti-virus software.

(ii) To ask departments to regularly update the signature files of anti-virus software for the identification of newly found viruses.

(iii) To remind departmental staff not to use computer software of doubtful origin and unlicensed or pirated software. Newly installed computer program files should be scanned with anti-virus software to ensure that their computer systems are free from virus attacks.

(v) To advise departmental staff not to put computer files into the computer network systems for public use unless they have been scanned by anti-virus software and confirmed that they are not infected by virus.

Apart from raising the awareness of all government departments on computer viruses and enhancing their ability to prevent virus through the issue of circulars, organisation of talks and seminars etc., the ITSD will also provide technical advice and services to them.

(b) The anti-virus measures formulated by the ITSD have been in place over the years. The ITSD has all along promoted these measures among the staff of government departments and encouraged them to enforce the measures stringently. It will also monitor closely the latest development of computer viruses and keep the departments informed in the first instance. With a view to enhancing the knowledge of the community on computer viruses, the ITSD has uploaded the relevant information to its web page (www.info.gov.hk/itsd/) for public reference.

(c) Computer users in small and medium enterprises can refer to the web page of the ITSD for guidelines on the prevention of computer viruses. Besides, some anti-virus products providers offer trial versions of their anti-virus software on the Internet. Users can download them for trial use free of charge.

END/Wednesday, June 2, 1999

NNNN