Business department security policies in place

BERR has improved its security since the data handling review

"Fewer than five" staff have broken IT security policies at the Department for Business, Enterprise and Regulatory Reform (BERR) in the past year and have been sanctioned for the breach, according to a written answer from BERR minister Pat McFadden.

The answer came in response to a series of questions from Anne Main, MP.

McFadden said BERR's security policies followed guidelines laid out in the Security Policy Framework, the Data Handling Report and the National Information Assurance Strategy produced by the Cabinet Office.

"BERR is compliant with HMG IA Standard No 4 – Communication, Security and Cryptography for the encryption of data," he said.

"BERR follows CESG [the security arm of GCHQ] guidance on the use of the Wi-Fi Protected Access 2 (WPA2) communications security protocols in order to protect wireless networks carrying protectively marked traffic."