Tag Archives: China

image_pdfimage_print

LCQ11: Cybersecurity of government departments and other public organisations

     Following is a question by the Hon Edward Leung and a written reply by the Secretary for Innovation, Technology and Industry, Professor Sun Dong, in the Legislative Council today (November 22):

Question:

     It is learnt that as the Government is promoting the development of Hong Kong into a smart city and as more public organisations are implementing electronic services, the public has expressed increasing concerns on the cybersecurity measures they adopt. In this connection, will the Government inform this Council:

(1) in relation to the recent cyberattacks on the Cyberport and the Consumer Council, whether the Government knows the major root causes leading to the data breaches and why such root causes were not found in previous security assessments;

(2) of the number of systems (such as websites, apps and hosts) of government departments and other public organisations which were attacked by ransomware last year, and the number of such attacks not disclosed to the public;

(3) of the number of systems mentioned in (2) which were covered by continuous security assessment and improvement programs (such as vulnerability disclosure program and bug bounty program); and

(4) whether it has estimated the talent gap of cybersecurity talents required to be filled to address the needs of government departments and other public organisations for continuous security assessments and improvements?

Reply:

President,

     The Government is very concerned about the recent incidents of unauthorised access into computer systems of individual public organisations by hackers. These incidents suggest that cybersecurity threats are increasingly commonplace. All sectors of society must take effective measures to safeguard their systems and enhance security of the networks and data.

     Having consulted the Commerce and Economic Development Bureau and the Security Bureau, my reply to the questions raised by the Hon Edward Leung is as follows:

(1) The cybersecurity incident at Cyberport in August 2023 was caused by ransomware. As soon as its computer systems were suspected of being intruded by hackers, Cyberport had implemented multiple measures immediately, including strengthening cybersecurity and system’s defence, engaging independent cybersecurity expers for investigation and review, and reporting the case to the Police and the Office of the Privacy Commissioner for Personal Data (PCPD). Cyberport had also made public announcements on the incident and the latest development, and notified the known potentially affected persons to offer them assistance as far as possible. In this connection, the Board of Directors of Cyberport had established a Task Force to monitor the relevant follow-up actions.

     Meanwhile, the computer system of the Consumer Council (the Council) was similarly attacked by hackers with ransomware in end-September 2023. Upon discovering the intrusion, the Council had immediately taken multiple follow-up actions, including strengthening security measures of the system, reporting to the Police and PCPD, and appointing a forensic expert to conduct investigations. The Council had also held a press briefing to inform the public of the incident and contacted the potentially affected persons to urge them to stay vigilant and suggest measures to be taken, including avoiding opening or clicking on suspicious links, emails or messages.

(2) and (3) With regards to the security of information systems and cyberspace, the Government has devised and implemented on an ongoing basis a multi-layered system covering assessment, monitoring, risk management and contingency. To ensure the safety of government information systems, all government departments must adopt a risk-based approach to continuously identify security risks of their information systems by regularly conducting independent information security risk assessments and reviewing and enhancing current security measures to keep relevant measures abreast of the times and ensure their effectiveness in tackling the latest cyber risks. On the other hand, in view of evolving pattern of cyber attacks, the Office of the Government Chief Information Officer (OGCIO) has been closely monitoring the trends of cyberattacks and the associated security threats, and issued timely security alerts and reminders to government departments to assist and remind them of their obligation to make prompt responses and strengthen their precautionary measures.

     Besides, the Critical Infrastructure Security Coordination Centre (CISCC) of the Police is committed to strengthening the protection and resilience of critical infrastructure through public-private partnership, risk management and on-site security inspections, etc. By instilling the concept of Security-by-Design and providing professional security recommendations, the CISCC seeks to enhance critical infrastructure’s capacity in defence, response and recovery. Meanwhile, the Cyber Security Centre under the Cyber Security and Technology Crime Bureau (CSTCB) of the Police provides round-the-clock cyber security protection and conduct timely cyber threat audits and analyses for critical infrastructure in the sectors of government, banking and finance, transportation, communications and public utilities, so as to prevent and detect cyberattacks against critical infrastructure.

     The Government’s information security incident response mechanism requires all government departments to report information security incidents to the OGCIO when such security incident occurs. Last year, the OGCIO received in total five information security incident reports on ransomware infection of government information systems, which did not involve information leakage. Figures of the afore-mentioned information security incidents have been published in the Data.Gov.HK portal. The Government does not maintain statistics of cyberattacks on public organisations.

(4) Cybersecurity concerns various segments of information technology (IT), and hence the Government did not make any estimation on the demand and supply of the cybersecurity-related manpower. To promote the comprehensive development of IT security industry and grooming of talents, as well as to strengthen capability of relevant practitioners on cybersecurity protection, the Government has been promoting the following measures:

(i) The OGCIO and the IT industry regularly organise activities including thematic seminars, technology workshop, certificate courses on information security, cybersecurity incident response training and the Information Security Summit to enhance IT practitioners’ skills and knowledge of information security;

(ii) The OGCIO collaborates with the industry on holding different promotion activities such as school visits, InfoSec Tours, Cyber Youth Programme, Hong Kong Cyber Security New Generation Capture The Flag Challenge, etc. to enhance the knowledge and interest in cybersecurity amongst young people and students, thereby encouraging and grooming more talents for the information security industry;

(iii) The OGCIO supports tertiary institutions to provide more information security programmes, works with professional information security associations to promote professional accreditation for IT practitioners and holds activities including seminars and workshops, which aim to equip more IT practitioners with information security knowledge and skills;

(iv) The Government seeks to attract technology talents from all over the world through the Technology Talent Admission Scheme to work in the research and development fields including information security industry in Hong Kong, so as to enrich Hong Kong’s pool of talents on information security; and

(v) The CSTCB has established the Cyber Range, which provides a safe and controlled virtual environment for training police officers and other cyber security practitioners under simulated cyberattack and defence scenarios, thereby helping to develop professional competence of stakeholders in order to strengthen the safeguard of cybersecurity in Hong Kong. read more

LCQ14: Water quality of river channels and nullahs

     Following is a question by the Hon Stanley Li and a written reply by the Secretary for Environment and Ecology, Mr Tse Chin-wan, in the Legislative Council today (November 22):
 
Question:
 
     It has been reported that the water quality of river channels and nullahs varies, and, in particular, abnormalities in water quality have been detected at Shing Mun River in Sha Tin. In this connection, will the Government inform this Council:
 
(1) of (i) the number of complaints received about the hygiene conditions of Shing Mun River, as well as the follow-up actions taken, and (ii) the numbers of inspections and cleaning operations carried out at Shing Mun River, as well as the manpower and expenditure involved, in each of the past three years;
 
(2) whether it has regularly reviewed the effectiveness of the measures adopted to monitor the water quality of river channels and nullahs; if so, of the details; if not, the reasons for that;
 
(3) whether it has any long-term strategy to improve the water quality of river channels and nullahs; if so, of the details and timetable; if not, the reasons for that;
 
(4) whether it has studied the introduction of more innovative technologies to monitor the water quality, hygiene conditions and drainage capacity of river channels and nullahs; if so, of the details; if not, the reasons for that; and
 
(5) whether new education and publicity activities are in place to promote the public’s attention and efforts towards maintaining the environmental hygiene of river channels and nullahs?
 
Reply:
 
President,
 
     The reply to the question raised by the Hon Stanley Li is set out below.
 
(1) The numbers of complaints received by the Food and Environmental Hygiene Department (FEHD), the Environmental Protection Department (EPD) and the Drainage Services Department (DSD) about the environmental hygiene of Shing Mun River in each of the past three years are tabulated below:
 

Year/Department FEHD EPD DSD
2021 9 90 10
2022 10 58 6
2023
(Up to October)
12 30 9
          
     The FEHD is responsible for removing floating refuse in nullahs, river channels, watercourses and natural rivers. At present, a cleaning service contractor engaged by the FEHD is tasked with removing the floating refuse from Shing Mun River. The contractor would deploy one supervisor and three workers for inspection and refuse removal. They would drive a boat to carry out regular inspection and refuse removal work along the course of Shing Mun River. During the rainy season from May to September each year when there is usually more floating refuse in the river, the contractor would provide daily inspection and refuse removal services. The inspection and refuse removal services are provided every other day from October to April of the following year. The FEHD would also deploy staff to carry out irregular inspections to ensure proper performance of the contractor and follow up on complaints by instructing the contractor to remove floating refuse from the river promptly. The contractor would take actions in response to the complaints and remove refuse from the river according to the FEHD’s instructions.
 
     The EPD, which has all along been attaching great importance to the environment and water quality of Shing Mun River, has regularly inspected and monitored the water quality of the river, followed up on all complaints against wastewater discharge and river water quality and deployed staff to trace suspicious sources of wastewater discharge. If any acts in breach of law are identified, the EPD will take appropriate enforcement actions to combat illegal sewage discharge.
 
     Regarding manpower arrangement and expenditures, as the clean-up of Shing Mun River as well as the handling of complaints on environmental pollution of the river with follow-up inspections are parts of the routine work performed by the relevant departments, there is no separate breakdown of such expenditures.
          
(2) and (3) Most of the river channels in the urban areas of Hong Kong are artificially constructed or substantially modified drainage channels, or the so-called “nullahs”. The EPD conducts routine water quality monitoring on a monthly basis at some 30 major rivers (including those nullahs mainly for flood drainage) across the territory, with sample analyses covering over 50 physical, chemical and biological parameters. Besides, pursuant to the Water Pollution Control Ordinance (Cap. 358), the compliance rate of the Water Quality Objectives (WQOs) is calculated by using five representative WQO parameters (including pH, suspended solids, dissolved oxygen (DO), five-day biochemical oxygen demand (BOD5) and chemical oxygen demand) to assess the overall condition of river water quality. In parallel, the EPD bases on the three key parameters of DO, BOD5 and level of ammonia-nitrogen to calculate the Water Quality Index (WQI), which rates river water quality in five categories, namely “Excellent”, “Good”, “Fair”, “Bad” and “Very Bad”, for assessing the overall health condition of river water quality.
 
     Shing Mun River was heavily polluted decades ago, resulting in odour issues. The Government has adopted a series of measures to improve the water quality, including provision of sewerage facilities for villages and installation of dry weather flow interceptors, implementation of the Livestock Waste Control Scheme, rectification of sewer misconnections, as well as conduct of bioremediation works for river sediments. The main channel of Shing Mun River first achieved “Excellent” WQI grading in 2005 and has maintained this grading since 2008 up to present. In 2022, the overall WQO compliance rate of Shing Mun River was 94 per cent, and its main channel has met the water quality requirements for secondary contact water recreational uses (such as rowing).
 
     As for the overall improvement strategy, apart from ongoing monitoring, inspections and law enforcement, the Government has been proactively planning and developing sewerage infrastructure over the years to continuously improve public environmental hygiene and water quality of rivers and harbour. The Government’s four key strategies include upgrading sewage treatment facilities and extending public sewerage systems to cater for population growth and development needs, providing village sewerage systems to improve the rural environment, installing dry weather flow interceptors to improve the nearshore water quality of Victoria Harbour, and progressively rehabilitating ageing sewers.
 
     In 2022, the river water quality of Hong Kong maintained in a good and stable condition, achieving an overall WQO compliance rate of 88 per cent. In terms of the WQI grading, 84 per cent of the rivers in Hong Kong were graded as “Excellent” or “Good” in 2022, as compared with only 26 per cent in 1987. This shows a significant improvement in the river water quality of Hong Kong over the past 30 years as well as a substantial reduction of pollution loads in river channels. The Government will carry on with the above measures for continuous improvement in the water quality of river channels and nullahs in Hong Kong.
          
(4) As regards the application of innovative technologies in water quality monitoring, the EPD is exploring the use of locally-developed battery-powered mobile cameras at the downstream of some strategic storm water manholes to monitor storm water drainage systems. This can facilitate our further and long-term tracing and identification of sewer misconnections in upstream areas. The EPD will keep in view technological development and introduce the use of relevant technologies where appropriate, so as to protect the environment more effectively.
 
     The DSD also continues to enhance its application of innovative technologies in flood control monitoring. It has installed about 300 remote flood control devices such as rain gauges and water level sensors at different locations across the territory to collect 24-hour real-time data on rainfall yield, water levels and tidal levels, etc, for instant transmission to the hydrological information system. Staff can use smartphones or computers to monitor the conditions of the main river channels and watercourses in real time, thereby facilitating the DSD to promptly implement preventive and contingency measures.
 
(5) The EPD has rolled out a number of education and publicity campaigns to encourage members of the public to protect river channel environment, which include notifying construction sites to step up on-site rainwater management before the rainy season every year so as to prevent the pollution of river channels by rainstorm-induced overflow of wastewater. Besides, to avoid environmental pollution of river channels and hygiene and nuisance problems caused by the improper use of septic tank systems, the EPD has also devoted relevant publicity efforts, including setting up a webpage on “Tips on Proper Operation of a Septic Tank System” and distributing publicity materials to the residents of villages that have not yet been connected to public sewage systems to remind them of the importance of the proper use, repair and maintenance of septic tanks. 
 
     The DSD has all along been promoting its work on the protection of river channels through TV Announcements in the Public Interest, publications, leaflets and other activities such as opening its flood prevention facilities for public visits, organising river greening fun day and implementing outreach educational programmes, etc. read more

LCQ19: Community recycling facilities

     Following is a question by the Hon Chan Kin-por and a written reply by the Secretary for Environment and Ecology, Mr Tse Chin-wan, in the Legislative Council today (November 22):
 
Question:
 
     In order to encourage the public in actively practising waste reduction and recycling in daily lives, as well as to complement the Municipal Solid Waste charging (MSW charging) to be implemented by the Government on April 1, 2024, the Environmental Protection Department is taking forward the community recycling network GREEN@COMMUNITY and launched a food waste collection trial scheme in public rental housing (PRH) estates (the trial scheme) on October 30, 2022. In this connection, will the Government inform this Council:
 
(1) given that the facilities provided under GREEN@COMMUNITY include Recycling Stations, Recycling Stores and Recycling Spots, whether the authorities will set up more such facilities in various districts, especially those currently without Recycling Stations, in preparation for the implementation of MSW charging; if so, of the timetable; if not, the reasons for that;
 
(2) whether more temporary recyclables collection points will be set up prior to the next Lunar New Year and the implementation of MSW charging, so as to cope with the large number of recyclables delivered by members of the public within a short period of time; if so, of the details; if not, the reasons for that;
 
(3) whether the amount of food waste collected so far under the trial scheme has met the expectations; as the Government has set a target to extend the trial scheme to cover a total of 100 blocks of PRH estates in 2023-2024, whether it will implement the trial scheme further at other blocks of PRH estates after the target has been met; if so, of the timetable; if not, the reasons for that; and
 
(4) whether the Smart Food Waste Bins have been checked and cleaned regularly to ensure their proper functioning and prevent hygiene problems; if so, of the details; if not, the reasons for that?
 
Reply:
 
President,
 
     My reply to the question raised by the Hon Chan is set out below:
 
(1) and (2) The Environmental Protection Department (EPD) has been expanding the community recycling network to strengthen the support for recycling facilities at the district level. There are currently 11 Recycling Stations emphasising on both environmental education and recycling support, 33 Recycling Stores located in close proximity to clusters of single-block buildings and over 120 Recycling Spots operating weekly at fixed time and locations in the form of kerb-side collection booths under the GREEN@COMMUNITY throughout the 18 districts in Hong Kong for the collection of nine common types of recyclables. These include glass containers, plastics, small electrical appliances, fluorescent lamps, rechargeable batteries and beverage cartons, which are lack of commercial recycling activities. The service of the GREEN@COMMUNITY has covered about 80 per cent of the single-block buildings (including “three-nil” buildings).
 
     In addition, the first Recycling Store located in an MTR station, namely GREEN@TSING YI, will come into operation in the first quarter of 2024. The operator has already started to provide Recycling Spots and housing collection services in Kwai Tsing District since October this year. The 12th Recycling Station, namely GREEN@WONG TAI SIN, is expected to commence operation in the fourth quarter of 2024. 
 
     Strengthening the recycling support in public rental housing (PRH) estates will facilitate the implementation of municipal solid waste (MSW) charging. The EPD plans to develop a network of Recycling Stores in PRH estates to enable the residents and those living nearby to participate in clean recycling and enhance the cost-effectiveness of the recycling network. The first two Recycling Stores in PRH estates, namely GREEN@KWAI FONG and GREEN@TAI WO HAU, have commenced operation in late June this year. The EPD prepares to expand the network to 50 PRH estates progressively starting from the end of this year. Tender assessment is now underway.
 
     The EPD will review from time to time the operation of all community recycling facilities and specific needs of individual district for recycling facilities to improve the service of the community recycling network. Prior to the Lunar New Year and the implementation of MSW charging next year, the EPD will adopt measures such as increasing the number of Recycling Spots and extending the service hours in order to cope with the possible increase in the amount of recyclables. In addition, before the implementation of MSW charging, 50 new Recycling Stores in PRH estates will commence operation progressively and the number of public collection points in Hong Kong will be increased to over 220.
 
(3) The EPD, in collaboration with the Housing Department (HD) and the Hong Kong Housing Society, launched the Trial Scheme on Food Waste Collection in PRH Estates (the Trial Scheme) in end-October 2022. Under the Trial Scheme, smart recycling bins equipped with overflow prevention and odour abatement devices are used to collect food waste for better environmental hygiene, and “GREEN$” rewards are provided to encourage residents’ participation. The Trial Scheme has been extended to 13 PRH estates (with a total of 101 blocks), covering about 170 000 residents as at mid-September this year, which is six months earlier than the original target schedule.
 
     Since the launch of the Trial Scheme for a year, more than 1 200 tonnes of food waste have been collected, with a daily average of about 5 tonnes. The quantity of food waste collected is in line with our expectations, and over 50 per cent of the households in some PRH estates have used the smart recycling bins. Overall speaking, the Trial Scheme has been well received by PRH residents with positive comments. With the implementation of MSW charging on April 1, 2024, it is expected that the public demand for food waste recycling will continue to increase. In this regard, the EPD has embarked on the progressive installation of smart recycling bins in all PRH estates (involving about 1 400 additional housing blocks) targeting for completion by 2024 to further encourage domestic food waste recycling.
 
 (4) The EPD attaches great importance to the operation and hygiene conditions of smart recycling bins, and regularly deploys staff to conduct inspections at the participating PRH estates. The contractor also provides maintenance services for the smart recycling bins. The recent inspection results have shown satisfactory hygiene conditions at the smart recycling bins and their surrounding areas. As the smart recycling bins are usually installed at fully ventilated locations near entrances of PRH blocks and equipped with odour abatement devices, odour problems would not be caused under normal circumstances. In addition, when the smart recycling bins have reached about 70 per cent of their full capacity, the system will automatically send phone messages to frontline cleansing staff, ensuring that they have sufficient time to replace the inner bins and avoid potential environmental hygiene problems arising from overflowing.
 
     In view of the implementation of the Trial Scheme, the EPD has provided additional resources to the HD to ramp up its manpower for enhancing cleansing services at the participating PRH estates, including maintaining cleanliness of the smart recycling bins and their surrounding areas, replacing food waste filled inner bins and properly storing them temporarily at designated locations in the PRH estates (e.g. central refuse collection points). These would facilitate the daily collection of food waste by EPD’s contractors for delivery to the treatment facilities for recycling. read more