35160 (2026). Dr Lawrence Xu-Nan to the Minister of Education

35160 (2026). Dr Lawrence Xu-Nan to the Minister of Education: In response to Reply 33140 (2026), prior to the discovery of trial login access to live reporting records, was there any Certification and Accreditation finding, remediation action, Privacy Impact Assessment action or entry risk related to trial-account segregation, Role-Based Access Control, report permissions, environment separation or production access?

Hon Erica Stanford: I am advised by the Ministry of Education that there were no remediation action findings identified in the Certification and Accreditation for the Student Monitoring, Assessment and Reporting Tool (SMART). I refer the Member to R03-1 of the Recommended Actions found on page 14 within the SMART Privacy Impact Assessment: https://web-assets.education.govt.nz/s3fs-public/2026-04/Appendix%20B_Redacted.pdf?VersionId=4LzEifSvDzo26DjDdiAS23b1c1uDXAon