(1)   For each financial year since 1 July 2000, on how many occasions have departmental employees accessed files or records without proper authorisation.

(2)   In each instance identified in Part (1), (a) what action was action taken against the employee and (b) if the unauthorised access involved customer records, in how many instances was the customer notified.

(3)   Are employees able to access personal or customer files without (a) being detected, or (b) leaving a record of their access.

(4)   What auditing procedures exist to monitor employee access to files and records.

(1)   No breaches were reported for the period.

(2) (a)   n/a

(b)   n/a

(3)  

(a)   In the case of classified electronic files and records, IT systems use log on            and password controls. For classified hardcopy files and records a range of controls (including registers and receipt books) are in place to manage access to this material.

(b)   Log files are generated for IT systems. For hardcopy files a number of controls are in place including registers and receipt books.

(4)   A range of auditing is undertaken including: reviews of IT system audit logs, Internal Audit Reviews, ANAO Audits, and reviews triggered when staff leave the department as part of Exit Procedures.