The Issue Podcast: Tech expert questions how Canberra is handling data on the budget, health and MP travel
‘I think this is a national scandal.’
A software engineer and academic, who once worked as a public servant, warns Canberra’s mismanagement of Australia’s data is a “national scandal”.
Samuel Spencer tells 7NEWS Podcast The Issue that sensitive data on the Budget, Pharmaceutical Benefits Scheme and COMCAR (politicians’ travel) is being collected and stored on dated and inappropriate software, leaving it vulnerable to criminals and bad actors.
He is blowing the lid on what he believes are poor practises in the Australian Public Service.
Sign up to The Nightly's newsletters.
Get the first look at the digital newspaper, curated daily stories and breaking headlines delivered to your inbox.
By continuing you agree to our Terms and Privacy Policy.The CEO of Aristotle Metadata, and Adjunct Professor at the University of Canberra, has been digging around the federal government’s data catalogue.
He’s found the Department of Finance is managing two internal budget master databases on excel spreadsheets.
“What are the risks if somebody sends the Budget out early? Like, they’d play the money markets and they’d almost win instantly,” Spencer tells The Issue podcast.
“So before we even look at the cyber security risks, it’s the risks around errors, miscalculations, and even data being sent out the door.
“I think this is a national scandal.”
Finance department responds
The Master Database – Special Appropriations is used to track created and abolished special appropriations, which includes more than a trillion dollars in federal government spending.
The Master Database – Special Accounts is used to track created and abolished special accounts including the portfolio responsible, sunset dates, investments, borrowing powers and purposes.
A spokesperson for the Department of Finance has told 7NEWS: “The Department of Finance does not use Excel to manage special accounts or special appropriations”.
“The referenced documents are internal, administrative documents, separate from the Central Budget Management System, which is the Australian Government’s authoritative system for appropriation management, budget development and management, and whole-of-government financial reporting.
“Access to internal documents and financial management systems is subject to established security controls and government security requirements, including role-based access controls, Multi-Factor Authentication, audit trails and compliance with the Protective Security Policy Framework and Information Security Manual.”
Deputy Prime Minister Richard Marles says he has “a high degree of confidence about the way we are managing our information”.
“Australians should have that confidence as well,” Marles told 7NEWS.
“In the Australian Signals Directorate we have one of the best agencies in the world.”
Similar concerns with management of health data and politicians’ travel records
Spencer also claims records show MPs and Senators travel is collected and stored on Excel spreadsheets.
The Government’s Dataplace website says the COMCAR Automated Resource System (CARS) is on MS Excel and saves all trip, vehicle and driver data.
“Anthony Albanese’s private taxi service for himself and every politician in Parliament House and around Australia is managed in a spreadsheet,” Spencer said.
“This isn’t asking for a deep technical attack, this is just asking the right person to send you a file and you would then know the travel locations of almost every parliamentarian.”
Similarly, Spencer is concerned that the Department of Health collects details about Pharmaceutical Benefits Scheme claims on an Excel spreadsheet.
The Department of Health, Disability and Ageing says it “publishes aggregate PBS claims data”, and that “these files do not contain patient-level records or any information that could identify individual patients, prescribers or pharmacies”.
Spencer also points out that the Prime Minister has had his phone number and bank details compromised in the last 12 months, and says that should push his Government to crackdown on the public service.
He also wants new national AI standards to include specific requirements for the federal government.
“He’s had his phone number leaked and he’s had his bank account details breached,” Spencer said.
“If he’s saying that he can protect Medicare, why doesn’t he start with trying to put in regulations that will protect himself? How’s he going to protect Medicare for us?”
You can catch more of The Issue on Listnr or watch full episodes on our YouTube channel.
Originally published on 7NEWS
