Rural agencies 'face cyber security risk' after losing 540 devices

Defra recorded an increase of lost devices over the three financial years
Defra recorded an increase of lost devices over the three financial years

Defra and the Environment Agency could face a possible cyber security risk after new figures show the rural bodies lost or misplaced 540 electronic items in the last few years.

The findings, obtained from a Freedom of Information (FoI) request, reveal that in total Defra lost or misplaced 100 of these valuable devices.

The Environment Agency reported a total of 440 of the lost devices.

Of these figures, mobile phone losses were ranked the highest, with the Environment Agency losing 363 and Defra losing 63.

Laptops were the second most lost device with 59 reported lost by the Environment Agency and 35 from Defra, and 21 tablet computers were lost in total – 3 from Defra and 18 from the Environment Agency.

However, only Defra recorded an increase of lost devices over the three financial years, having lost just 28 in 2016-17 compared to 40 in 2018-19 – an increase of 43 per cent.

The Environment Agency saw a decrease of 24 per cent over the three years.

Andy Harcup, of IT company Absolute Software, said the figures paint an 'unbelievable' picture as government continues to increase spending on cyber security.

“Every single lost device is a potential goldmine of confidential information and should be properly secured so that if stolen it can be tracked, frozen and recovered.

“It’s also critical that government agencies have capabilities in place so that when devices are exposed to threats outside of their control, they are able to locate them and wipe the data in order to comply with critical regulations like GDPR,” he said.

A spokesman for the Environment Agency said all staff are required to work in accordance with IT and security policies so that it can work toward minimising losses and risk associated with losses.

“We employ over 10,000 staff across the country. Due to the nature of our work, we have operational staff working in the field to protect the environment and support our incident response capabilities.

“Because of this there is always a risk that exposure to threats concerning mobile technology will be increased.”