LCQ8: Security of Wi-Fi facilities in government venues
*******************************************************

     Following is a question by the Hon Samson Tam and a written reply by the Secretary for Commerce and Economic Development, Mrs Rita Lau, in the Legislative Council today (May 26):

Question:

     Regarding information security when using Wi-Fi facilities at government premises in Hong Kong, will the Government inform this Council:

(a) whether the Government has examined the encryption security of the wireless network access points at all government premises in Hong Kong each year since 2008; if it has, of the details; if not, the reasons for that;

(b) whether it had received in the past three years complaints from members of public who used Wi-Fi facilities at the aforesaid premises that their data were stolen for the purposes of conducting illegal activities; if it had, of the number of complaints and follow-up actions; and

(c) what new publicity and educational activities the authorities have organised to further enhance public awareness of the security when using Wi-Fi facilities at the aforesaid premises?

Reply:

President,

     Regarding the questions raised by the Hon Samson Tam, my reply is as follows:

(a) We engage independent security consultants to perform security risk assessment and audit of the Government Wi-Fi facilities annually. Two such exercises were conducted in 2008 and 2009, and no non-compliance was found.

(b) We have not received in the past three years any complaint from users relating to their data being stolen or used for illegal purposes during their use of the GovWiFi service.

(c) Under the GovWiFi Programme, the Office of the Government Chief Information Officer (OGCIO) has been publicising and promoting Wi-Fi security to the public through various media and channels such as Announcements in the Public Interest on television and radio, roving shows, posters, leaflets, GovWiFi's web portal (www.gov.hk/en/theme/wifi/program/index.htm) as well as government's information security portal (www.infosec.gov.hk). OGCIO has scheduled two public seminars on information security in end May and November 2010.

     In addition, the Office of the Telecommunications Authority (OFTA) has been sponsoring the industry in organising the "SafeWiFi" campaign since 2008. The campaign aims to educate the public about the importance of Wi-Fi security and remind users on setting up appropriate security detection and protection measures. In view of the increasing popularity of mobile Internet services, OFTA has also launched a new publicity campaign named "New Era of Mobile Internet, Be Smart for Smooth Net Surfing" starting from mid-March this year to promote smart use of mobile Internet services. Some useful advice on Wi-Fi safety was also delivered through public talks and thematic website of this campaign.

Ends/Wednesday, May 26, 2010
Issued at HKT 15:12

NNNN