Vic controller databases manipulated, misused: IBAC – Strategy – Security

The Victoria Corruption Observer hinted that agency staff are abusing the state's sensitive regulatory databases, accusing security and information governance of not take into account corruption. IBAC and other integrity agencies have information suggesting that regulators may record, manipulate and incorrectly use data to meet the requirements of the Anti-Corruption Commission (IBAC). The IBAC Observatory has doubled what it sees as a clear potential for data banks to be used for corrupt purposes

. as the first "prevention and detection" strategy to mitigate the risks of corruption.

Agenc The ACAC survey includes VicRoads, WorkSafe, Victoria Consumer Affairs, the Victorian Building Authority and the Victoria Police Licensing and Regulation

"Employees are more likely to detect and report colleagues who do not manage this information appropriately. "

"Robust systems for detecting the misuse of information can also help regulators identify employees who access and disclose information inappropriately

" systems could include regular and random checks of access to the database. The random and persistent audit of access to the database is already a common feature of social protection and law enforcement agencies. Some, like Centrelink, revealed the results of these audits to the public

Police officers from several states were also punished or sacked for inappropriately researching data on persons of interest, spouses and even neighbors

. The IBAC report on corruption risks among regulators is the first step to put organizations in this field on a footing of equality with the stricter requirements imposed on large custodians of sensitive data like health

. Regulators and how they could be misused are likely to lead to better information management practices and, as a result, fewer opportunities for corruption. "" Educating employees about the risks badociated with working with personal information – as well as the relevant legal provisions regarding the handling of this information – will ensure that w will access and disclose information. "