New Zealand Government Ministry of Justice
The Ministry of Justice (MoJ) is a NZ government agency responsible for the administration of justice and the legal system. The MoJ deals with sensitive information and has the highest standards of confidentiality and privacy.
MoJ recognise that they need to provide a high level of security on their computers, particularly with laptops, which are often used in a variety of non-office locations where the risk of loss of data is significant.
To implement this security, MoJ needed to issue and manage keys to be used for hard disk encryption and securing VPN access; and they purchased Entrust's PKI product, Entrust Authority, to do this. They needed someone to help them develop a complete solution based on this product.
The MoJ engaged Castelain to define their security requirements and then to assist in documenting, implementing and deploying the PKI based security solution.
Castelain approached the engagement by first understanding the existing business processes and then designing the solution to fit in with those processes. Castelain developed documents covering the whole life cycle of the deployment, which included the Threat and Risk Assessment, the Requirements Specification, Key Management Plan, the Key Signing Ceremony scripts and operator and user procedure documentation.
Castelain and the NZ Government Communications Security Bureau (GCSB) assisted MoJ in the initial deployment and operation of the PKI.
MoJ now has a highly secure solution for their mobile workforce. The deployment has been so successful that other business units of the organisation are now using it to issue their own certificates.
