Privacy security

Surveillance watchdog investigates security risks of GCHQ IT contractors

But Computer Weekly has learned that GCHQ has submitted new evidence to a hearing in the UK’s most secretive court revealing that about 100 IT industry contractors have “privileged user” access to the surveillance agency’s live computer systems following a policy change “a few years ago”.

The Investigatory Powers Commissioner’s Office (IPCO), the UK’s overseer of surveillance laws governing the intelligence services and law enforcement, told Computer Weekly it was taking seriously claims that contractors could misuse their trusted status to access databases containing intercepted telephone, internet and email records of individuals, or other highly sensitive intelligence records.

“We recognise the importance of the need for reviewing the security arrangements for contractors which may have access to sensitive data, particularly given the recent leaks by contractors in other countries. We began work last year, and it’s going to be a focus for our inspection activity in 2018,” said an IPCO spokesman.