UK government dragged for incomplete security reforms after Afghan leak fallout

The article reports that a previously secret 2023 Information Security Review examining 11 major UK public-sector data breaches (including the 2021 Afghan-related MoD email exposure and other wrong-recipient and exposed-spreadsheet incidents) has been published; the review identified recurring failures such as insufficient download controls and misdirected emails, issued 14 recommendations due between late 2023 and mid-2024, and parliamentary committees are questioning why only 12 recommendations have been implemented and why the review was kept secret.