Source · Select Committees · Public Accounts Committee
Recommendation 12
12
New casework system DACS implemented with enhanced controls to protect information.
Conclusion
The Department told us that it has since implemented a new system which has embedded controls to allow the Department to protect information more effectively, and that this meant that it is no longer using embedded or hidden data in spreadsheets.26 The Department 20 C&AG’s Report, para 11 21 C&AG’s Report, para 12 22 Qq 1, 10 23 Q 1 24 Q 13 25 Letter from Ministry of Defence, 7 October 2025 26 Q 10 10 introduced its new casework management system, known as the Defence Afghan Casework System (DACS), in May 2022, after the February 2022 data breach occurred but before it was discovered.27 In correspondence received after our evidence session, the Department said that the DACS includes stricter access controls and audit logs, and prevents the sharing of data outside secure systems without appropriate protocols being adhered to.28 Learning lessons from previous data breaches
Government Response
A response document is linked to this report, dated 19 January 2026. Response attribution to this conclusion has not been verified. Read the response document ↗