Back in 2006 I mentioned on this site that the JPA System had a couple of security issues. However when I left earlier this year they still had not carried out the necessary security upgrades required to ensure the integrity of data.
I laugh at how I was treated in regard to the whole sorry affair.
The shocking lack of understanding of Data Security by EDS and the MOD is a farce of the highest British proportions.
They treat the Data Protection Act as a tool to slap the operator down with but do not pay it due and proper consideration when the requirement is on them.
But until they (we) stop buying the cheapest option, which includes employing monkies and hiding behind process that are inadequate for the task and no accountability (not just shooting the lowest rank present), we will continue to have these issues and them being aired in the press.