The Official Report is a written record of public meetings of the Parliament and committees.
All Official Reports of meetings in the Debating Chamber of the Scottish Parliament.
All Official Reports of public meetings of committees.
Displaying 2547 contributions
Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
Can I go back to him?
Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
Hello, David. I cannot see you on screen. I was asking about the back-up strategy and whether you could give the committee some assurance that the back-up procedure that is in place will, as far as possible, make the same type of cyberattack impossible to succeed, and that your back-up data is physically separate from the main systems data.
As I understand it, the hack reached the back-up data first, so you were unable to reinstate your systems. Have you taken steps to make sure that that data separation is physical, so that the back-up data cannot be attacked, should there be a future attack?
Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
Is there now physical separation between the main systems data and the organisation’s back-up data? To my mind, that would mean that any further attempts of a similar nature could not succeed.
Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
I turn to the workforce issue. We know that there are more staff than ever working in the NHS. The number is up considerably compared with 2006. However, recruitment is still an issue. Is retention also an issue? Are we losing staff from the service? Can we pin that down as being due to Covid? Are the recruitment issues and our ability to find staff and attract them into the service connected to Brexit? Is our recruitment strategy working? What should we do to improve it?
Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
The committee has been doing some work on skills identification and has discussed that at previous meetings. How does this strategy tie in with the strategic approach to skills identification? I asked particularly about the Ayrshire context at a previous meeting. How can we demonstrate or identify the skills that are needed to meet future demand in NHS Ayrshire and Arran, for example? How does that tie in with the strategic approach that is happening elsewhere?
Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
Thank you very much for that. If David Pirie comes back online, I might—
Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
I appreciate what you have said, but can you please confirm that, should something of a similar nature occur again, the back-up data could not be physically or logically accessed by any hackers who might wish to do that? There has to be complete separation of your data to protect it from future hacks.
Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
Great—thank you very much for that.
Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
I thank Jo Green for that answer. David Pirie does not need to tell us about the details. The committee simply wants to be reassured that the back-up strategy is different from, and more secure than, the previous one. As we all know, another phishing email could come in on any day, through which—by clicking, linking, following or whatever—staff could inadvertently provide access to your systems data. I just want to get a sense that that issue has been recognised and that steps have been taken to provide additional protection for SEPA’s systems data.
Public Audit Committee
Meeting date: 17 March 2022
Willie Coffey
Auditor General, I want to talk about NHS workforce recovery and connect it to the skills issue. I know that the Government agrees that innovation and service redesign are essential. I go back to the time of your predecessor Robert Black, when I sat on the Public Audit Committee. I think that Colin Beattie was there, too. Robert Black presented a report like yours, in which he said that service redesign was essential. I know that a lot of work has been done since then, but you say in your report that
“there is not enough detail”
in the recovery plan to give us the assurances that we need on achieving the ambitions and the timescales that might apply.
Will you talk a little more about that? What kind of information do we need in the recovery plan to help us to drive the redesign process forward?
10:30