A government office proves incapable of handling basic information security.

In other news... Most snow found to be white, Pope suspected of being Catholic, and my cat's breath smells of catfood.

Of course it's down to the culture rather than one individual - the odd breach could be down to individuals breaking rules or not knowing better, but the frequency of these breaches in government department just tells me that the civil service as a whole doesn't have a clue about real security. There is simply no excuse for not having a rigorous infosec policy and enforcing it, when you are handling so much potentially sensitive information.

Until such a time as we have confidence in the policies and procedures, these government departments should be limited to handling the absolute minimum relevant information they require to do the job, which is a lot less than they currently have, and there's no question of ID cards being introduced. If you can't trust the people with the information, don't give them any!

Mine's the coat with the RFID guardian and no identifying papers in the pockets.