CrimCheck

CrimCheck is an accredited agency with the Australian Criminal Intelligence Commission that provides National Criminal History Checks. Working with individuals, employers, businesses and Australian and International Criminal Courts it is imperative that the sensitive information they supply is kept secure and confidential.

The Challenge

Security was the primary focus of this project. We needed to meet stringent government standards for data security in both transit and storage. We also needed to ensure user access to the platform was well managed.

Our Approach

We agreed with the client on a set of encryption protocols for both data transit and storage. Beyond this, we used pragmatic measures including timely deletion of data and a robust server configuration to minimise risk.

We also used defensive programming techniques and undertook detailed code reviews to protect data at the application layer.

The Results

At the completion of the project, professional penetration testers were engaged by CrimCheck to audit the platform. After a detailed analysis they were pleased to report no vulnerabilities could be detected (apparently quite uncommon). CrimCheck continues to thrive as the only not-for-profit organisation providing National Criminal History Checks.