Information Security and Privacy

Our teams project manage the development and integration of security solutions in the manufacturing, healthcare, banking, law enforcement and utility sectors in Australia and Asia Pacific. We have been involved with some of the largest project in Australia, many with complex information privacy implications at the heart of their operations.

Our security clients include Sydney Water, State Transit, NSW Police, NSW Attorney General's Department, NSW Director of Public Prosecutions, NSW Health, Australian Nuclear Science & Technology Organisation, Air Services Australia, Rockwell Automation, and Commonwealth Bank.

Our services across these sectors span the following:

Information Security Management Systems

-  Implementation of systems, registers and governance frameworks to support the operation of management systems that comply with the requirements of ISO27001;

-  Provision of advice on the development of supporting policies, controls, and practices;

-   Design and implementation of Information Security Agreements to support the ongoing management of critical practices within an organisation and provide a framework for audit and evaluation of key controls; and

-   Design and implementation of effective Information Security education programs to disseminate and reinforce key messages about critical practices and controls over information.

Information Security Consulting & Design Services

-   Design of governance, and management procedures for management of certified operating and development environments;

-   Security analysts, methods and tools to review and manage delivery of secure applications; and

-   Secure network access management design.

Information Privacy Services

-   Advice of information privacy policy and its implications for information collection, storage, use and disposal;

-   Review of internal procedures and policies for compliance with legislative requirements; and

-   Advice on the design of applications for the collection and storage of personal information.

Business Assurance Services

-   Risk Management & Business Impact Analysis;

-   Development of Business Continuity Plans;

-   Disaster Recovery; and

-   Penetration Testing of critical networks, infrastructure, and applications.