Security Controls

To ensure we’re getting the most from our IT systems, we follow industry-standard configuration recommendations produced by the Centre for Internet Security (CIS). All configuration recommendations are assessed and approved by the Information Security Team, and only the applicable standards are implemented.

Access controls

Access controls help us keep IT systems and data secure by authenticating and authorising system users. This usually involves a username and password but can also require the use of Multi-Factor Authentication (MFA) – see below for further details.

24x7 monitoring and logging

All information systems which create, maintain, store, access, process, or transmit information or business data are monitored 24x7 for vulnerabilities and intrusion detection. We use robust monitoring tools to oversee and log all events and transactions that occur within the Southern Cross environment.

Information management

Personal information is handled in accordance with our Member Privacy Statement.