Information Security

MQA personnel include several information technology professionals who were involved in research into artificial intelligence, encryption and decryption as well as the design and development of computer hardware and software. Thus, we are aware that computers are capable of playing chess at the highest level, diagnosis of diseases and real time translation of natural languages. However, computer systems lack common sense and have the intelligence of a 2 year old human child.

Thus Information Technology cannot guarantee security of information. While suppliers of hardware and software incorporate features which deter unauthorised access, Information Technology is incapable of preventing a determined hacker from gaining access to data stored in computer systems which are connected to networks and the internet.

Information Security

Security of Information is dependent on the diligence of the users of that information. Users of Information Technology should carefully define and agree Service Level Agreements with their IT suppliers who are responsible for the products supplied.

The Market research Standard ISO 20252 and ISO 9001 current evolved versions embrace attendance to Risk and Data Protection. Certification to ISO 27001 provides useful guidelines designed to achieve a degree of confidence that a company applies diligence to the information it holds. However, it cannot guarantee that the information is one hundred percent secure.

Possibly the securest information is handwritten in large, heavy ledgers which are locked into a safe built into the walls of a vault which is securely locked (!)