- Questions published
- Reply lodged
Asked by
Francisco Hernandez
List MP · Green Party
Questions
-
4885
How much, if any, did the Minister’s departments, agencies, crown entities and any other bodies that the Minister is responsible for, if any, spend fixing database security breaches in the 2023 calendar year?
-
4895
How much, if any, did the Minister’s departments, agencies, crown entities and any other bodies that the Minister is responsible for, if any, spend fixing database security breaches in the 2024 calendar year?
Original response/referral lodged:
-
4896
How much, if any, did the Minister’s departments, agencies, crown entities and any other bodies that the Minister is responsible for, if any, spend fixing database security breaches in the 2025 calendar year?
Answered by
Hon Simeon Brown
Member for Pakuranga · National Party · Minister of Health
Answer
I am advised the Ministry of Health had no database security breaches in 2022, 2023, 2024, or 2025. As such, there was no spend associated to fixing database security breaches. Health New Zealand's cybersecurity incidents vary widely in their nature and scope. I am advised that most incidents are quickly resolved, and the costs of responding to such incidents and any consequent fixes to systems (including databases), are met within baseline as part of the usual work of Health New Zealand's Digital Services group and not separately recorded. I am further advised that in the case of larger incidents, additional costs may be incurred through the engagement of third parties, but I am advised that this is generally to support the response to the incident, rather than fixing systems (including databases). The costs and timing of fixes following an incident are not necessarily done as part of an incident response, unless necessary to address a critical security vulnerability, and may be delivered by different technical teams at different times depending on the nature of the fix and its relative importance.