The number of incidents regarding local companies' computer security have decreased.

Secretary for Commerce, Industry & Technology Henry Tang said a survey showed that computer incidents fell from 1,510 in 2000 to 1,095 in 2002.

Of the interviewed companies that had set up servers or websites, 326 said they had encountered computer security incidents.

These incurred a total financial loss of $1.84 million, or about $5,600 per victimised company. However, this was not considered seriously adverse to Hong Kong's economy.

The survey was conducted last year by the Information Technology Services Department, Police and the Hong Kong Productivity Council's Computer Emergency Response Team Co-ordination Centre.

The impact of computer incidents on small companies was greater than on large- and medium-sized ones, as most had only adopted basic information security technologies.

Mr Tang told the Legislative Council today there was a need to enhance local companies' awareness of information security and computer incidents.

He said public education and related support services have been stepped up to help various sectors, especially small and medium enterprises, enhance their knowledge on information security, measures to prevent computer incidents, and their capability to deal with such incidents.

Meanwhile, Police have upgraded facilities required for investigating computer crime.

Mr Tang said the Department, Police and the Council also work with the industry to enhance the information security capabilities of businesses.

Major initiatives include:

* the production of publicity materials and organisation of exhibitions and seminars on information security;

* the launching of the INFOSEC website (www.infosec.gov.hk), a one-stop portal which provides resources and latest news on information security;

* the production of two short public education programmes on information security, for broadcast on television and radio later this year;

* the issuing of alerts on security risks and computer viruses through www.hkcert.org. A support hotline has also been set up;

* free, short message alert services will be issued through mobile phones; and,

* the Handbook on Information Security will be distributed to businesses in mid-2003.