Skip to main content

In response to Reply 33140 (2026), prior to the discovery of trial login access to live reporting records, was there any Certification and Accreditation finding, remediation action, Privacy Impact Assessment action or entry risk related to trial-account segregation, Role-Based Access Control, report permissions, environment separation or production access?

Answered Question 35160 (2026)
Question published
Reply lodged

Asked by

Lawrence Xu-Nan

List MP · Green Party

Question

  • In response to Reply 33140 (2026), prior to the discovery of trial login access to live reporting records, was there any Certification and Accreditation finding, remediation action, Privacy Impact Assessment action or entry risk related to trial-account segregation, Role-Based Access Control, report permissions, environment separation or production access?

Answered by

Hon Erica Stanford

Member for East Coast Bays · National Party · Minister of Education

Answer

I am advised by the Ministry of Education that there were no remediation action findings identified in the Certification and Accreditation for the Student Monitoring, Assessment and Reporting Tool (SMART). I refer the Member to R03-1 of the Recommended Actions found on page 14 within the SMART Privacy Impact Assessment: https://web-assets.education.govt.nz/s3fs-public/2026-04/Appendix%20B_Redacted.pdf?VersionId=4LzEifSvDzo26DjDdiAS23b1c1uDXAon