PRESS STATEMENT

Transport responds to Court decision on eNATIS

Date issued: 31 May 2007

 

Tshwane: The Department would like to clarify matters surrounding the court application to prevent the Beeld newspaper from printing a leaked Management Report from the Auditor General on Information systems audit of the network security.

 

The Department respects the decision taken by the court and will study the judgement, which may necessitate further comment by the department on this matter. The Department confirms that its intention to apply for an interdict against the Beeld Newspaper was not for the purposes of “gagging” that Newspaper. The Department confirms its decision to apply to court for an interdict against the Beeld newspaper was the correct one. We say this for the following reasons:

 

·           The Department was informed by the Beeld that they had a part of a Management Report relating to the network audit on the eNaTIS system. Accordingly the Department had an obligation to prevent the disclosure of sensitive information contained in that report that could lead to security breaches on the system.

·           The Department sincerely and reasonably believed that parts of the Management Report in the possession of the Beeld may have contained sections publication of which may compromise the integrity of the system.

 

An audit by the Auditor General is conducted along the following procedure:

1.         A planning memorandum is drawn by the auditors in which the scope of the audit is defined, and which the procedures are spelt out.

2.         Thereafter, the auditors perform the audit and prepare a set of findings which is then discussed with the Department’s representatives, in order to verify the facts and findings, correct factual inaccuracies and obtain their on the findings and recommendations. This process takes the form of a draft report, which is known as a management report. The purpose of such a management report is to disclose the findings and conclusions arising from a follow-up information system audit and to serve as a basis for comments and corrective steps. This report is dealt with on senior management level.

3.         Once management has given its inputs, the final report is prepared by the Auditor General and is then presented to Parliament in terms of the Public Audit Act.         At this stage the findings cannot be further disputed.

 

Accordingly, the Department still re-iterates its position that the content of Management Reports do not belong in the public domain until conclusion of the audit process that results in the tabling of the audit report in Parliament.

 

The Department still considers itself bound by the relationship of confidentiality it has with the Office of the Auditor General in relation to the audit process as defined above.

 

The department is encouraged by the fact that court did pronounce that the content of the Management Report is confidential.

 

The Department expresses its concern that an institution like Sanef had openly criticised the Department for its decision to apply to court for an interdict, without attempting to obtain any comments from the Department relating to its court application.

 

The eNaTIS system was not in production when the audit was conducted in July 2006, but the system was under development. In actual fact, the eNaTIS system was only commissioned in April 2007. During the audit process not a single component of the eNaTIS system was in production. The audit therefore focussed on the development environment that was substantially different than the production environment.

 

The Department is confident that all the matters relating to the eNaTIS system security raised in the Auditor General’s Management Report (Information systems audit of the network security) has been dealt with through the re-development process and migration from the NaTISto the eNaTIS. The eNaTIS system since its been operational has not been audited.

 

e-NaTIS did experience problems in the migration process in the vehicle registration component. However, after significant interventions, the system is operating optimally in a stable state, performing in excess of 500 000 transactions per day. 

 

The Department wants to state that investigations are underway relating to all matters that have arisen regarding the eNATIS.

 

Issued by the Department of Transport

Media contact: Collen Msibi 082 414 5279