CrimTrac
CrimTrac manages information on behalf of law enforcement agencies around Australia and needs to ensure that information that is being accessed as part of an investigation is controlled and authorized.
CrimTrac engaged Castelain to review the agency's access control policy and to help with the implementation of software to manage and control access to CrimTrac information.
Castelain helped CrimTrac to develop their access control policy and access control system. Castelain advised on how to ensure that access to information was within the law and met the requirements of the Privacy Act. Castelain also reviewed the security design and provided recommendations on improvement.
Castelain also developed an administrative guide for using access control to manage access and resources.