The Department of Health and Ageing
The Department of Health and Ageing (Health) engaged Castelain to provide an independent IT Security assessment of one of their outsourced systems that processes highly sensitive personal data.
The purpose of this review was twofold:
- to assess the adequacy of project security documentation provided by the outsourcer and to make recommendations concerning areas that would benefit from more detailed independent analysis, and
- to make recommendations concerning the design and operation of the system and appropriate levels of data classification, in the context of ACSI 33.
Health asked Castelain to implement a number of the recommendations. These included reviewing the critical application code and the database components and reviewing of the firewall rules to ensure they were adequately protecting against external and internal threats.
The recommended actions, which included changes to the system, have now been completed. These have increased the Department's confidence that sensitive data is secure.
