Credential safety
Programme workflows rely on public-chain information and authorised records. Private keys and seed phrases are outside the operating model.
Security and assurance
Security controls that support responsible access
Security is treated as a continuing operating responsibility across identity, case data, evidence integrity, infrastructure and incident response.
Identity and authorisation
Authentication, role permissions, administrative separation and access review support need-to-know handling.
Integrity and auditability
Material actions, sources, transformations and reviewer decisions should remain traceable within the relevant workflow.
Data lifecycle
Collection, storage, export, retention, redaction and deletion are governed by purpose and applicable obligations.
Incident response
Potential security or privacy events require triage, containment, investigation, remediation and appropriate communication.
Assurance cycle
Application security, dependency risk, access control, evidence handling and operational controls are reviewed and improved over time.