Whistle Blowing Service offers the most advanced systems and services including:
- Australian government grade server, located in Australia. Every client database is on a secure and encrypted database.
- All connections across Wi-Fi and the web are secure and encrypted between the person reporting from Australia and the Australian web portal.
- All people, phone number, web services portal are Australian. We do not use services from outside of Australia.
- Any client reference material to be made available is stored in a secured area. Access is granted under strict secure and agreed access protocols, without tracing of client employees that access this area.
- Each client has their own instance, there are no shared pathway or common access. Accordingly, separation and integrity is ensured through “air gaps”, rather than through internal controls and protocols in those cases where the database resides on an office server.
- One client, one dedicated reporting support desk. We do not operate with one database, many clients. Our 1800 number is for general IT enquires to help people to the self-service portal. The self-service portal is the primary point of contact to ensure security, confidentiality and anonymity.
- All meta data is stripped from files provided. Where a documents provided needs to be included in a report, then any identifying data and metadata is removed. If this not sufficient to protect security, confidentiality and anonymity, alternative measures are adopted.
- We provide a unique reference number that can be used access the particular request. The person concerned does not have to provide any identifying information or be the subject of communication initiated by WBS that connects them to a request. Use of email or phone as a preferred a communication tool must be expressly agreed to and nominated by the person concerned.
- We have the Highest level of protection for people reporting and increased reporting levels.
DATA SECURITY STATEMENT
At WBS, we are committed to ensuring that all data and information collected, processed, and stored through our services adhere to the highest standards of security and confidentiality. As a provider of government-grade services based in Australia, we follow strict protocols to protect your information in compliance with relevant Australian laws and regulations.
1. Compliance with Australian Standards All data and information managed by WBS are stored and processed in accordance with the Australian Government’s Protective Security Policy Framework (PSPF) and the Information Security Manual (ISM). Our infrastructure is designed to meet the stringent requirements of these standards, ensuring the integrity and security of your information at all times.
2. Secure Data Storage WBS utilizes advanced encryption methods and secure cloud-based storage solutions that comply with government-grade security standards. All data is stored within Australia in facilities that meet or exceed the Australian Government’s standards for data security and resilience. We ensure that all data is encrypted both at rest and in transit, providing multiple layers of protection against unauthorized access.
3. Access Control and Monitoring Access to data and information is strictly controlled and monitored. Only authorized personnel with the necessary security clearances can access sensitive information. We employ robust identity and access management systems to ensure that access is granted only on a need-to-know basis and is regularly reviewed to maintain security integrity.
4. Data Retention and Disposal WBS adheres to strict data retention policies as mandated by Australian law and specific government contracts. Data is retained only for as long as necessary to fulfill contractual obligations or legal requirements. Upon expiration of the retention period, data is securely disposed of in accordance with government-approved methods, ensuring complete and irreversible destruction of the information.
5. Transparency and Accountability We are committed to transparency in our data management practices. WBS regularly audits its data storage and security measures to ensure compliance with all relevant standards and regulations. Any breaches or potential risks are addressed immediately, and we work closely with government agencies to ensure that our practices remain at the forefront of security standards.
6. User Rights and Privacy WBS respects the privacy rights of all individuals and entities whose data we manage. We provide clear, accessible information about how your data is used and stored. If you have any questions or concerns about your data, or if you wish to exercise your rights under the Privacy Act 1988 (Cth), please contact our Data Protection Officer through the contact for.
