All controls passingIRAP PROTECTED · assessed Q1 2026ISO 27001 · SOC 2 Type II
Active sessions
128
-3 vs avg vs prior wave
MFA coverage
100%
enforced vs prior wave
Blocked attempts (24h)
47
-12% vs prior wave
Key rotation
3d ago
auto · 30d vs prior wave
Control posture
- PassData at restAES-256 · per-tenant KMS keys
- PassData in transitTLS 1.3 · mTLS for ingest
- PassIdentitymyGovID / VANguard · MFA enforced
- PassHosting regionAU sovereign · Canberra + Sydney
- MonitorAnomaly detectionUEBA · 47 alerts triaged (24h)
Audit log · last events
Streaming · live| Timestamp (AEST) | Principal | Action | Target | Source IP | Status |
|---|---|---|---|---|---|
| 2026-05-19 09:42:11 | a.nguyen@soudcoh.gov.au | Viewed cohort report | Army — Serving | 10.14.22.8 | OK |
| 2026-05-19 09:38:02 | system | MFA challenge passed | j.patel | 10.14.22.41 | OK |
| 2026-05-19 09:31:44 | j.patel@soudcoh.gov.au | Exported aggregate CSV | Wave 2 / Reservists | 10.14.22.41 | OK |
| 2026-05-19 09:18:09 | system | Encryption key rotated | kms/sentinel-prod | — | OK |
| 2026-05-19 08:57:33 | m.okafor@ahrc.gov.au | Role granted: Reviewer | s.lee@ahrc.gov.au | 10.14.31.2 | OK |
| 2026-05-19 08:42:01 | system | Failed login (locked) | unknown@— | 203.0.113.44 | BLOCKED |
| 2026-05-19 08:21:55 | a.nguyen@soudcoh.gov.au | Schema change deployed | instrument v2.3.1 | 10.14.22.8 | OK |
| 2026-05-19 07:58:12 | system | Backup completed | pg-sentinel-prod | — | OK |
Data lineage · who can see what
Respondent
Own session only
Reviewer (AHRC)
Aggregate views · cohort ≥ 50
Program Lead
All aggregates · raw with dual-control export