Electronic security

We were commissioned to:

• support a review into the security of electronic documents within government. The review required us to assess the current security of electronic documents across government, to identify the type and level of threat posed to these documents, and to propose a range of integrated and appropriate security countermeasures to be implemented by all government departments and agencies. In identifying appropriate countermeasures we played an important role in helping to develop initiatives that changed the perspective of many departments and agencies on security and its part in supporting the achievement of their business outcomes.

• undertake a comprehensive set of penetration tests of a client's physical and information technology infrastructure. The tests allowed the client to identify its vulnerabilities and implement changes that significantly strengthened its defences against unauthorised access.

• undertake Threat and Risk Assessments for a number of major government departments on their Local Area Network (LAN). This required identifiying departmental elements to be included in the TRAs, then identify and evaluate the threats potentially confronting the LANs. We utilised our access into the appropriate security agencies, and our business relationship with the Australian Computer Emergency Response Team, to identify realistic potential threats and develop effective countermeasures. The TRA process also required us to facilitate an agreed assessment by departmental senior management of the acceptable levels of harm and required risk.

• conduct performance monitoring and audit arrangements of emergency communications (emergency call taking and dispatch). Identify areas of overlap and gaps in current performance monitoring and audit arrangements and where appropriate make recommendations on these matters.

• support a client's Year 2000 Millennium Project. Our charter was to establish an early warning capability to protect the client from Year 2000 related impacts by collecting information and monitoring Key Indicators. We developed and established an Information Monitoring Cell and information management process within the client's existing crisis management structure. Due to the success of the project, we were further contracted to incorporate the new procedures into its existing crisis management policies and procedures.

---

Return to services