133 Molesworth Street
PO Box 5013
Wellington 6140
New Zealand
T+64 4 496 2000
8 May 2024
Erika Whittome
By email: [FYI request #26376 email]
Ref:
H2024039263
Tēnā koe Erika
Transfer of your request for official information Thank you for your request under the Official Information Act 1982 (the Act) to the Ministry of
Health - Manatū Hauora (the Ministry) on 9 April 2024. You requested:
“
1. all the minutes of the subsequent meetings with the digital security team on the above
decision to review, and the minutes when any security setting changes were proposed.
2. Any written reviews or current-state documentation of the security settings "before" and
"after" states for any changes from Sept-Dec 2021.
3. The records of digital security changes that were made, ie the change control
documents or (ICT) tickets to implement these digital security changes. I am requesting
the high-level information on what was implemented, the rollback plan for the change or
the work ticket etc. Please, no need for network details such as IP addresses, VLANs
etc, just any fully qualified domain names which had security changes implemented on
them.
4 During this review, were digital security changes implemented for both student and staff
VLANS? Or just staff VLANs in the Education and Tertiary sector?
5. Please include any related memos, texts, emails and correspondence etc around the
digital security settings review which were to address the reported difficulties with anti-
vaccine sentiment in this environment, as reported in the steering group minutes dated 7
Sept 2021. I assume this review would have been ongoing for a number of weeks or
months.”
The Ministry does not hold any information relating to this part of your request; however, I have
been advised that this information is more closely connected to the functions of Te Whatu Ora –
Health New Zealand. For this reason, I have decided to transfer your request to Te Whatu Ora
under section 14(b)(ii) of the Act. You can expect a response from Te Whatu Ora in due course.
If you wish to discuss any aspect of your request with us, including this decision, please feel
free to contact the OIA Services Team on: [email address].
We apologise for the delay in transferring your request. Consultations had to be undertaken to
identify the best course of action for your request.
Under section 28(3) of the Act, you have the right to ask the Ombudsman to review any
decisions made under this request. The Ombudsman may be contacted by email at:
[email address] or by calling 0800 802 602.
Nāku noa, na
Jan Torres
Manager, OIA Services
Government and Executive Services | Te Pou Whakatere Kāwanatanga
Page 2 of 3
COPY OF OIA REQUEST
From: Erika Whittome
<[FYI request #26376 email]>; Received: Tue Apr 09 2024 14:34:41 GMT+1200 (New Zealand Standard Time)
To: OIA Requests
<[email address]>; OIA
<[email address]>; Subject: Official Information request - Digital security settings to address anti-vaccine sentiment
in Tertiary and Education
Dear Ministry of Health,
I am requesting information on your digital security team based on the information in the
minutes of the "Covid-19 Vaccine Immunisation Program Steering Group:
dated 7 Sept 2021 (from
https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ffyi.org.nz%2Frequest%2
F15656%2Fresponse%2F74170%2Fattach%2F5%2FH202116597%2520Document%25202%2
520CVIP%2520Steering%2520Group%2520Minutes.pdf&data=05%7C02%7Coiagr%40health.
govt.nz%7C619c1bb463dd4900fa2408dc583d99e1%7C23cec7246d204bd19fe9dc4447edd1fa
%7C0%7C0%7C638482268812396296%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAw
MDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=KZf2
%2BW9Yz7sUwLbZmc2JXwSVhwFu%2B8Jq6rMcaEXmqdQ%3D&reserved=0). The minutes dated 7 Sept 2021 say:
Update on school-based vaccinations (Rachel Mackay)
------------------------------------------------------------------------------
As of today, we have communicated with the Ministry of Education and Tertiary Institutions that
employees are now eligible for priority to be vaccinated.
...there are some difficulties with anti-vaccine sentiment in this environment. The Ministry of
Health is meeting with the digital security team to review the security settings.
Would you please share:
1. all the minutes of the subsequent meetings with the digital security team on the above
decision to review, and the minutes when any security setting changes were proposed.
2. Any written reviews or current-state documentation of the security settings "before" and
"after" states for any changes from Sept-Dec 2021.
3. The records of digital security changes that were made, ie the change control documents or
(ICT) tickets to implement these digital security changes. I am requesting the high-level
information on what was implemented, the rollback plan for the change or the work ticket
etc. Please, no need for network details such as IP addresses, VLANs etc, just any fully
qualified domain names which had security changes implemented on them.
4 During this review, were digital security changes implemented for both student and staff
VLANS? Or just staff VLANs in the Education and Tertiary sector?
5. Please include any related memos, texts, emails and correspondence etc around the digital
security settings review which were to address the reported difficulties with anti-vaccine
sentiment in this environment, as reported in the steering group minutes dated 7 Sept 2021. I
assume this review would have been ongoing for a number of weeks or months.
Yours faithfully,
Erika Whittome
Page 3 of 3
