Since the Reg just published this story of an SME being find because they did no peentration testing and some other things
(https://www.theregister.co.uk/2017/06/27/boomerang_video_hack_ico_fine/)
How much will the ICO be able to fine Whitehall?
Or will Whitehall argue they outsourced penetration testing to North Korea?
Biting the hand that feeds IT
