Re: Lessons learned
I went to HMRC to discuss ISO27001 compliance and certification many years ago just after a 'Minister' (a Rt. Hon. J Hacker, MP, I think) had promised that government departments and agencies would all be certified to the standard in a House of Commons speech.
HMRC had identified 24 core IT systems, and eventually decided to do their own thing, as it were. This was around the time they had got all of our income tax returns typed up by people in India, but HAD DEFINITELY NOT SENT ANY PERSONAL INFORMATION TO INDIA AS THE PEOPLE DOING THE TYPING DID NOT SPEAK ENGLISH. At least that is what the then Information Commissioner agreed to.
(Eat that Antony Jay and Jonathan Lynn, even YOU couldn't make that one up!)
Biting the hand that feeds IT
