Government Communications Security Bureau

Government Communications Security Bureau

Context

The Government Communications Security Bureau (GCSB) contributes to New Zealand's security by providing timely foreign signals intelligence to government. GCSB also assists government departments and agencies to protect their electronic information resources and communications systems.

Government Communications Security Bureau E-government Initiatives

• Broker for secure mobile telephones for Ministers
• Devolve website content

Summary

Ready Access: GCSB provides a degree of ready access to information on its website and via the government portal. Using more accessible language would improve people's understanding of the information provided.

Alignment: GCSB's services using the Internet are limited. However, GCSB advises other organisations how to manage and mitigate Internet and IT security threats. This advice makes it safer for other agencies to provide their services using the Internet.

Internet and Communications Technology

The Internet is important for GCSB to obtain and provide information to achieve its goals and objectives. GCSB provides services and information mostly for other agencies, and some limited services for businesses. Services are not provided to the public.

GCSB's Centre for Critical Infrastructure Protection (CCIP) provides advice to agencies and businesses, such as power companies, on how to securely use the Internet and networks. GCSB's only service provided using the Internet is to issue warnings when Internet viruses or hacking is detected.

The Information Systems Security (INFOSEC) function of GCSB provides policy, standards, material and advice to government departments and authorities regarding the protection of information that is processed, stored or communicated by electronic means. This information is published in GCSB's New Zealand Security of Information Technology (NZSIT) publications. NZSIT publications act as guidelines for agencies to use to secure their IT systems and protect associated information and services.

GCSB evaluates software applications and firewalls based on their security. Lists of endorsed products are produced in conjunction with Australia Defence Signals Directorate.

GCSB is considering developing a classified website to exchange specific security and intelligence information with other agencies. Only selected agencies would have access to this website.

An intranet is used extensively for staff to access and manage information. A document management system is being considered to improve information management. The document management system would be used in conjunction with a content management system to enable website and intranet content to be more devolved to the appropriate business units.

Ready Access to Information and Services

Metadata

GCSB has created nine metadata records, mainly on the CCIP. These records are appropriate, as the Bureau's other services are directed towards government and are not public facing.

GCSB has five metadata records that are still 'works in progress' and should be updated. Recommendations include:

• fill in additional metadata fields for the GCSB's agency record
• rewrite the descriptions for other records so that they are succinct and easy to understand
• provide an explanation of what CCIP is. For example, 'Find information on the Centre for Critical Infrastructure Protection's (CCIP) IT Security and Critical Infrastructure Publications and Alerts (Government Communications Security Bureau).

Website Assessment

Websites assessed during May 2004 included: www.gcsb.govt.nz

but excluded the Centre for Critical Infrastructure Protection, and Security in the Government Sector sites.

Overall, there is room for improvement to the GCSB website. Information delivery and usability could be improved. However, the website has a high level of accessibility.

Key quality issues noted during the assessment included:

• Usability and site navigation could be improved for easier use.
• There is no site search function available.
• Missing accessibility features, such as navigation skipping, access keys and style sheet problems may impede some physically impaired people's access.
• The writing style should be made less formal and bureaucratic so that information is easier to understand.
• Contact details could be more specific to enable responsive handling of enquiries.
• More links to other related content would be useful.

Alignment With E-government Goals

Convenience and Satisfaction

People can use GCSB's website to find out general information about the agency. Contact details are provided for people seeking information that is more specific.

Integration and Efficiency

GCSB is increasingly using the Internet for its business outreach. New websites are being considered to integrate some security and intelligence information among select agencies.

Information is integrated with agencies overseas, especially Australia.

Participation

GCSB uses the Internet effectively to contribute to participation by ensuring that people understand its role.