Use of janusSEAL and Correspondence around same

Ben Fairless made this Freedom of Information request to Department of Home Affairs

This request has been closed to new correspondence from the public body. Contact us if you think it ought be re-opened.

The request was partially successful.

Dear Department of Immigration and Border Protection,

I would like a copy of the below information please:

- A copy of the most current configuration settings for janusSEAL. This is an off the shelf product being used by DIBP to classify emails. janusSEAL allows the department to correctly classify emails in line with the Australian Government security classification system.

- A copy of any correspondence in the last 3 years sent to all DIBP staff in relation to janusSEAL. This may not reference the product by name, but may be a notification sent across the agency or training piece on how to correctly classify emails, or, for example, what will happen if you try to send an email classified as FOUO, PROTECTED or SECRET to a non .gov.au email address.

Please treat this request under administrative access if possible. If you can't treat it that way, please process it as a formal Freedom of Information request.

Yours faithfully,

Ben Fairless

IMPORTANT INFORMATION

Your email has been received by the Department of Immigration and Border
Protection’s Freedom of Information (FOI) Section. Please note that we
will only action and respond to FOI requests and other matters relating to
the Freedom of Information Act 1982.

 

If your email is a valid FOI request, the Department will contact you
shortly to acknowledge your request. Please be aware that there has been a
significant increase in the number of FOI requests received and that there
may be delays in the processing of your request. Please do not send
duplicate emails as this may also cause delays in processing times.

 

For matters not relating to the Freedom of Information Act 1982, your
email will not be actioned by the FOI Section. As a matter of guidance,
please refer to the information below to assist in the resolution of your
enquiry.

 

General information regarding travelling Australia

Information for visitors to Australia can be found [1]here.

Information regarding potential visa options can be found [2]here.

 

Request for a copy of your Visa Refusal or Visa Grant letter

If you have lost or misplaced correspondence regarding your Visa Refusal
or Visa Grant, or you wish to confirm the authenticity of your Visa
Refusal or Visa Grant, you should contact the office where you lodged your
visa application. 

Details of our offices located around the world can be found [3]here.

 

Queries regarding your current Visa status

You can check your visa details and conditions on the Department’s Visa
Entitlement Verification Online (VEVO) portal.  If you do not have the
necessary reference numbers to access the VEVO portal, you should contact
the office where you lodged your visa application for further information.

 

Refund of Visa fees

If you are seeking a refund of fees associated with your Visa, you should
contact the office where you lodged your visa application.  Details of our
offices located around the world can be found [4]here.

 

Making a Visa application

Registered migration agents are authorised to provide immigration advice
or assistance, including advice regarding the lodgement of visa
applications. Further information on migration agents may be found
[5]here.  Please note that the Department is unable to assist you in this
regard.

 

If you are experiencing technical difficulties in lodging your visa
application through ImmiAccount, you should submit your concerns through
the ImmiAccount Technical Support Form, which is accessible [6]here.

 

Australian Citizenship

If you are seeking evidence of your Australian Citizenship, you should
complete Form 119, which can be found [7]here.  Details on where to send
your completed form may be found on page 8 of the Form.  This form will
not be actioned by the FOI Section.

 

Information on how to apply for Australian citizenship, information for
Australian citizens and Australian Citizenship Day can be found [8]here.

 

Movement Records/Travel History

If you are seeking evidence of your own travel movements/history you
should complete Form 1359, which can be found [9]here. Details on where to
send your request may be found on page 1 and 2 of the Form. This request
will not be actioned by the FOI Section.

 

Superannuation – Evidence of Immigration Status

If you are seeking evidence of your own immigration status for
superannuation purposes, you should complete Form 1194, which can be found
[10]here. Details on where to send your completed form may be found on
page 1 of the Form. This request will not be actioned by the FOI Section.

 

Update Passport Details

Information on how to update your address or passport details can be found
[11]here.

 

Notification of Change in Circumstances

If you have lodged a visa application and your circumstances have changed,
you should submit [12]Form 1022 to the office where you lodged your visa
application. Details of our offices located around the world can be found
[13]here. The FOI Section does not process these forms. 

 

Notification of incorrect answers

If you wish to correct answers that you have provided to the Department
either:

·        in a visa application

·        on a passenger card or

·        in response to a notice given to you by the Department inviting
you to comment on possible non-compliance with an obligation to correct
incorrect information

you should submit [14]Form 1023 to the Department. Details of our offices
located around the world can be found [15]here. The FOI Section does not
process these forms. 

 

Duty Free concessions

Information relating to duty free concessions can be found [16]here.

 

General Enquiries

If you have a question, which has not been answered above, and which is
about visa, citizenship, trave or trade, including brining goods in and
out of Australia, please refer to our general enquiries web form [17]here.

 

 

Yours Sincerely

FOI Helpdesk

Freedom of Information Section

Department of Immigration and Border Protection

Information updated 30 September 2016

Important Notice: The content of this email is intended only for use by
the individual or entity to whom it is addressed. If you have received
this email by mistake, please advise the sender and delete the message and
attachments immediately.  This email, including attachments, may contain
confidential, sensitive, legally privileged and/or copyright information.
 

Any review, retransmission, dissemination or other use of this information
by persons or entities other than the intended recipient is prohibited. 
DIBP respects your privacy and has obligations under the Privacy Act 1988.
 

Unsolicited commercial emails MUST NOT be sent to the originator of this
email.

References

Visible links
1. http://www.border.gov.au/Trav/Visi
2. http://www.border.gov.au/Trav/Visa-1
3. http://www.border.gov.au/about/contact/o...
4. http://www.border.gov.au/about/contact/o...
5. https://www.mara.gov.au/
6. https://www.border.gov.au/Trav/Visa/Immi...
7. http://www.border.gov.au/Forms/Documents...
8. http://www.border.gov.au/Trav/Citi
9. http://www.border.gov.au/FormsAndDocumen...
10. http://www.border.gov.au/Forms/Documents...
11. http://www.border.gov.au/Lega/Lega/Form/...
12. http://www.border.gov.au/Forms/Documents...
13. http://www.border.gov.au/about/contact/o...
14. http://www.border.gov.au/Forms/Documents...
15. http://www.border.gov.au/about/contact/o...
16. http://www.border.gov.au/Trav/Ente/Duty-...
17. http://www.border.gov.au/about/contact/m...

FOI Request:   FA 16/11/00189

File Number:   ADF2016/65920

 

 

Good morning Mr Fairless

 

Acknowledgement of Freedom of Information Access request

 

On 2 November 2016, the Department of Immigration and Border Protection
received an access request received under the Freedom of Information Act
1982 (the FOI Act), seeking access to:

 

- A copy of the most current configuration settings for janusSEAL. This is
an off the shelf product being used by DIBP to classify emails. janusSEAL
allows the department to correctly classify emails in line with the
Australian Government security classification system.

 

- A copy of any correspondence in the last 3 years sent to all DIBP staff
in relation to janusSEAL. This may not reference the product by name, but
may be a notification sent across the agency or training piece on how to
correctly classify emails, or, for example, what will happen if you try to
send an email classified as FOUO, PROTECTED or SECRET to a non .gov.au
email address.

 

Your request has been allocated FOI request number FA 16/11/00189. Please
include your FOI request number in all correspondence with the Freedom of
Information (FOI) Section.

 

Timeframe for request

The statutory time frame provided under the FOI Act for processing
requests is a standard 30 calendar days. Due to the unprecedented number
of requests currently being received by the Department, our processing
times have increased.

 

We appreciate your patience and understanding during this busy time and we
will endeavour to finalise your request as soon as possible. Although we
endeavour to have all requests finalised within the statutory timeframes,
this is not practicable at this time. Requests that are outside the
processing timeframes under the FOI Act will still continue to be
processed by the Department.

FOI requests will generally be processed in the order that they are
received.  As the number of cases on-hand continues to increase, we are
unable to give you an exact date for the finalisation of your request. In
some cases where a request is specific and is seeking to access a single
document the Department may process this type of request within the 30 day
timeframe.

 

Request for an extension of time

For this reason the Department seeks your agreement (under s.15AA of the
FOI Act) to extend the timeframe for the processing of your request by 30
days. You may confirm your agreement to the extension of time by writing
to the Department at [1][email address]

 

If you agree to the extension of time please advise the Department within
14 days from the date of this letter. If you are unable or unwilling to
provide an extension of time you are not required to respond to this
letter.

 

Contacting the FOI Section

If you wish to discuss your access request you may contact the FOI Section
using the details provided below.

 

Contacting the Department

You can contact us with an enquiry in a number of ways including by email,
through our website; by telephone, through our Service Centres or offices
around the world, or in person. In Australia you can call 13 18 81 between
9 am and 4 pm Monday to Friday. Details on submitting a webform, or
contacting our offices outside Australia are available on our website at
[2]www.border.gov.au.

 

Yours sincerely

FOI Officer

Freedom of Information Section

Information Management Branch | Corporate Services Division

Corporate Group

Department of Immigration and Border Protection
E: [3][email address]

 

Important Notice: The content of this email is intended only for use by
the individual or entity to whom it is addressed. If you have received
this email by mistake, please advise the sender and delete the message and
attachments immediately.  This email, including attachments, may contain
confidential, sensitive, legally privileged and/or copyright information.
 

Any review, retransmission, dissemination or other use of this information
by persons or entities other than the intended recipient is prohibited. 
DIBP respects your privacy and has obligations under the Privacy Act 1988.
 

Unsolicited commercial emails MUST NOT be sent to the originator of this
email.

References

Visible links
1. mailto:[email address]
2. http://www.border.gov.au/
3. mailto:[email address]

Dear FOI,

I do not consent to an Extension of time at the moment.. This is a simple request that should be processed within the timeframes.

Yours sincerely,

Ben Fairless

1 Attachment

UNCLASSIFIED

Our references: FA 16/11/00189; ADF2016/65920

 

Dear Mr Fairless,

 

I refer to your FOI request received on 2 November 2015, seeking access
to the following:

 

1)    A copy of the most current configuration settings for janusSEAL.
This is an off the shelf product being used by DIBP to classify emails.
janusSEAL allows the department to correctly classify emails in line with
the Australian Government security classification system.

 

2)    A copy of any correspondence in the last 3 years sent to all DIBP
staff in relation to janusSEAL. This may not reference the product by
name, but may be a notification sent across the agency or training piece
on how to correctly classify emails, or, for example, what will happen if
you try to send an email classified as FOUO, PROTECTED or SECRET to a non
.gov.au email address.

 

The Department has made a decision on this request. Please see attached
the signed decision letter, decision record, schedule of documents and
documents released under the FOI Act. This request has now been closed.

 

Yours sincerely,

 

Brad Collins
Freedom of Information Officer

Information Management Branch

Department of Immigration and Border Protection
[1][email address]

 

UNCLASSIFIED

Important Notice: The content of this email is intended only for use by
the individual or entity to whom it is addressed. If you have received
this email by mistake, please advise the sender and delete the message and
attachments immediately.  This email, including attachments, may contain
confidential, sensitive, legally privileged and/or copyright information.
 

Any review, retransmission, dissemination or other use of this information
by persons or entities other than the intended recipient is prohibited. 
DIBP respects your privacy and has obligations under the Privacy Act 1988.
 

Unsolicited commercial emails MUST NOT be sent to the originator of this
email.

References

Visible links
1. mailto:[email address]

Dear Department of Immigration and Border Protection,

Please pass this on to the person who conducts Freedom of Information reviews.

I am writing to request an internal review of Department of Immigration and Border Protection's handling of my FOI request 'Use of janusSEAL and Correspondence around same'.

Part 1 of my request, my request was limited to: "A copy of the most current configuration settings for janusSEAL."

The decision maker, at part 9 of the decision, states that releasing the configuration for JanusSEAL would "effectively create a map for part of the Department’s IT security settings for anyone who wish to infiltrate the Department’s IT systems".

I respectfully disagree with this assessment of the document I'm seeking. The configuration information I am requesting information on only makes changes to email content (such as adding protective markers), changes to email headers (again to "mark" a document with a specific classification) and prevents specific emails being sent to specific domains which are not part of FedLink. I am not seeking information that would "create a map of the Department's IT security settings". The above information would provide the details of how the software is configured and contain parameters on how end-users interact with the software.

At paragraph 11, the decision maker states that "it would be virtually impossible to be certain that a partially redacted document contained no information that would be harmful to the Department."

One would assume that the Department hires individuals with a technical understanding who implemented JansuSEAL, in addition to Lawyers within the Freedom of Information branch. If the FOI Lawyers are not able to determine if the information would be harmful to the Department, perhaps they should seek advice from the manufacturer of the product, or from their in-house technical expertise. If you can't detail what parts of the document could "have a substantial adverse effect on the proper and efficient conduct of the operations of an agency" how can you say that the document as a whole meets this criteria?

On the Public Interest Test, I contend that there is significant public interest in understanding how multiple members in the Department have caused classified emails to be sent outside of the agency. I note that, following the relaxation of the "Auto-Complete" rules, at least one reported case where the FOI unit sent an email to a journalist containing information which was not for public consumption has been noted so far. There could be many others, and the way the software is configured plays a bit part in protecting end-users of the software from themselves.

I reserve the right to make additional contentions should this matter not be resolved in my favour at Internal Review.

A full history of my FOI request and all correspondence is available on the Internet at this address: https://www.righttoknow.org.au/request/u...

Yours faithfully,

Ben Fairless

IMPORTANT INFORMATION

Your email has been received by the Department of Immigration and Border
Protection’s Freedom of Information (FOI) Section. Please note that we
will only action and respond to FOI requests and other matters relating to
the Freedom of Information Act 1982.

 

If your email is a valid FOI request, the Department will contact you
shortly to acknowledge your request. Please be aware that there has been a
significant increase in the number of FOI requests received and that there
may be delays in the processing of your request. Please do not send
duplicate emails as this may also cause delays in processing times.

 

For matters not relating to the Freedom of Information Act 1982, your
email will not be actioned by the FOI Section. As a matter of guidance,
please refer to the information below to assist in the resolution of your
enquiry.

 

General information regarding travelling to Australia

Information for visitors to Australia can be found [1]here.

Information regarding potential visa options can be found [2]here.

 

Request for a copy of your Visa Refusal or Visa Grant letter

If you have lost or misplaced correspondence regarding your Visa Refusal
or Visa Grant, or you wish to confirm the authenticity of your Visa
Refusal or Visa Grant, you should contact the office where you lodged your
visa application. 

Details of our offices located around the world can be found [3]here.

 

Queries regarding your current Visa status

You can check your visa details and conditions on the Department’s Visa
Entitlement Verification Online (VEVO) portal.  If you do not have the
necessary reference numbers to access the VEVO portal, you should contact
the office where you lodged your visa application for further information.

 

Refund of Visa fees

If you are seeking a refund of fees associated with your Visa, you should
contact the office where you lodged your visa application.  Details of our
offices located around the world can be found [4]here.

 

Making a Visa application

Registered migration agents are authorised to provide immigration advice
or assistance, including advice regarding the lodgement of visa
applications. Further information on migration agents may be found
[5]here.  Please note that the Department is unable to assist you in this
regard.

 

If you are experiencing technical difficulties in lodging your visa
application through ImmiAccount, you should submit your concerns through
the ImmiAccount Technical Support Form, which is accessible [6]here.

 

Australian Citizenship

If you are seeking evidence of your Australian Citizenship, you should
complete Form 119, which can be found [7]here.  Details on where to send
your completed form may be found on page 8 of the Form.  This form will
not be actioned by the FOI Section.

 

Information on how to apply for Australian citizenship, information for
Australian citizens and Australian Citizenship Day can be found [8]here.

 

Movement Records/Travel History

If you are seeking evidence of your own travel movements/history you
should complete Form 1359, which can be found [9]here. Details on where to
send your request may be found on page 1 and 2 of the Form. This request
will not be actioned by the FOI Section.

 

Superannuation – Evidence of Immigration Status

If you are seeking evidence of your own immigration status for
superannuation purposes, you should complete Form 1194, which can be found
[10]here. Details on where to send your completed form may be found on
page 1 of the Form. This request will not be actioned by the FOI Section.

 

Update Passport Details

Information on how to update your address or passport details can be found
[11]here.

 

Notification of Change in Circumstances

If you have lodged a visa application and your circumstances have changed,
you should submit [12]Form 1022 to the office where you lodged your visa
application. Details of our offices located around the world can be found
[13]here. The FOI Section does not process these forms. 

 

Notification of incorrect answers

If you wish to correct answers that you have provided to the Department
either:

·        in a visa application

·        on a passenger card or

·        in response to a notice given to you by the Department inviting
you to comment on possible non-compliance with an obligation to correct
incorrect information

you should submit [14]Form 1023 to the Department. Details of our offices
located around the world can be found [15]here. The FOI Section does not
process these forms. 

 

Duty Free concessions

Information relating to duty free concessions can be found [16]here.

 

General Enquiries

If you have a question, which has not been answered above, and which is
about visa, citizenship, trave or trade, including brining goods in and
out of Australia, please refer to our general enquiries web form [17]here.

 

 

Yours Sincerely

FOI Helpdesk

Freedom of Information Section

Department of Immigration and Border Protection

Information updated 30 September 2016

Important Notice: The content of this email is intended only for use by
the individual or entity to whom it is addressed. If you have received
this email by mistake, please advise the sender and delete the message and
attachments immediately.  This email, including attachments, may contain
confidential, sensitive, legally privileged and/or copyright information.
 

Any review, retransmission, dissemination or other use of this information
by persons or entities other than the intended recipient is prohibited. 
DIBP respects your privacy and has obligations under the Privacy Act 1988.
 

Unsolicited commercial emails MUST NOT be sent to the originator of this
email.

References

Visible links
1. http://www.border.gov.au/Trav/Visi
2. http://www.border.gov.au/Trav/Visa-1
3. http://www.border.gov.au/about/contact/o...
4. http://www.border.gov.au/about/contact/o...
5. https://www.mara.gov.au/
6. https://www.border.gov.au/Trav/Visa/Immi...
7. http://www.border.gov.au/Forms/Documents...
8. http://www.border.gov.au/Trav/Citi
9. http://www.border.gov.au/FormsAndDocumen...
10. http://www.border.gov.au/Forms/Documents...
11. http://www.border.gov.au/Lega/Lega/Form/...
12. http://www.border.gov.au/Forms/Documents...
13. http://www.border.gov.au/about/contact/o...
14. http://www.border.gov.au/Forms/Documents...
15. http://www.border.gov.au/about/contact/o...
16. http://www.border.gov.au/Trav/Ente/Duty-...
17. http://www.border.gov.au/about/contact/m...

FOI Reviews mailbox,

UNCLASSIFIED
Our references: FA 16/11/00189-R1; ADF2016/65920

Dear Mr Fairless,

The Department has received your request for an internal review of the access decision finalised on 2 December 2016.

For future correspondence please note the new FA reference number for your internal review at the top of this email.

In accordance with s.54C(2) the Department will allocate your request for internal review to an officer other than the original decision maker to conduct the review.

Processing timeframe
The standard processing of an internal review is 30 days. Therefore, a decision on your internal review is due by 10 January 2017.

Please be aware that the Department of Immigration and Border Protection (the Department) has seen a significant increase in the number of FOI requests received by this agency. As a result there are expected delays involved with the processing of FOI requests at the present time. Generally, requests will be processed in the order that they are received. The Department will endeavour to finalise your request as quickly as possible.

Contacting the Department for your internal review
To contact the Department in relation to your internal review please contact us at [email address] and include your FA reference number.

Please do not hesitate to contact me should you wish to discuss.

Katie Meyboom
FOI Officer
Information Management Branch
Corporate Services Division | Corporate Group
Department of Immigration and Border Protection
PO Box 25, BELCONNEN ACT 2616
Email: [email address]

UNCLASSIFIED

-----Original Message-----
From: Ben Fairless [mailto:[FOI #2550 email]]
Sent: Sunday, 11 December 2016 12:21 AM
To: FOI <[email address]>
Subject: Internal review of Freedom of Information request - Use of janusSEAL and Correspondence around same

Dear Department of Immigration and Border Protection,

Please pass this on to the person who conducts Freedom of Information reviews.

I am writing to request an internal review of Department of Immigration and Border Protection's handling of my FOI request 'Use of janusSEAL and Correspondence around same'.

Part 1 of my request, my request was limited to: "A copy of the most current configuration settings for janusSEAL."

The decision maker, at part 9 of the decision, states that releasing the configuration for JanusSEAL would "effectively create a map for part of the Department’s IT security settings for anyone who wish to infiltrate the Department’s IT systems".

I respectfully disagree with this assessment of the document I'm seeking. The configuration information I am requesting information on only makes changes to email content (such as adding protective markers), changes to email headers (again to "mark" a document with a specific classification) and prevents specific emails being sent to specific domains which are not part of FedLink. I am not seeking information that would "create a map of the Department's IT security settings". The above information would provide the details of how the software is configured and contain parameters on how end-users interact with the software.

At paragraph 11, the decision maker states that "it would be virtually impossible to be certain that a partially redacted document contained no information that would be harmful to the Department."

One would assume that the Department hires individuals with a technical understanding who implemented JansuSEAL, in addition to Lawyers within the Freedom of Information branch. If the FOI Lawyers are not able to determine if the information would be harmful to the Department, perhaps they should seek advice from the manufacturer of the product, or from their in-house technical expertise. If you can't detail what parts of the document could "have a substantial adverse effect on the proper and efficient conduct of the operations of an agency" how can you say that the document as a whole meets this criteria?

On the Public Interest Test, I contend that there is significant public interest in understanding how multiple members in the Department have caused classified emails to be sent outside of the agency. I note that, following the relaxation of the "Auto-Complete" rules, at least one reported case where the FOI unit sent an email to a journalist containing information which was not for public consumption has been noted so far. There could be many others, and the way the software is configured plays a bit part in protecting end-users of the software from themselves.

I reserve the right to make additional contentions should this matter not be resolved in my favour at Internal Review.

A full history of my FOI request and all correspondence is available on the Internet at this address: https://www.righttoknow.org.au/request/u...

Yours faithfully,

Ben Fairless

-------------------------------------------------------------------
Please use this email address for all replies to this request:
[FOI #2550 email]

This request has been made by an individual using Right to Know. This message and any reply that you make will be published on the internet. More information on how Right to Know works can be found at:
https://www.righttoknow.org.au/help/offi...

If you find this service useful as an FOI officer, please ask your web manager to link to us from your organisation's FOI page.

-------------------------------------------------------------------

Important Notice: The content of this email is intended only for use by the individual or entity to whom it is addressed. If you have received this email by mistake, please advise the sender and delete the message and attachments immediately. This email, including attachments, may contain confidential, sensitive, legally privileged and/or copyright information.

Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. DIBP respects your privacy and has obligations under the Privacy Act 1988.

Unsolicited commercial emails MUST NOT be sent to the originator of this email.

hide quoted sections

FOI Reviews mailbox,

UNCLASSIFIED
Dear Mr Fairless,

I refer to your internal review request submitted to the Department on 11 December 2016.

Your request has been allocated to me to review and make a fresh decision in accordance with the Freedom of Information Act 1982. I have tasked the relevant internal business area and currently I am waiting for their advice.

I note your request is now overdue and I apologise for the delay in providing the decision to you. I will contact you again to advise how your request is progressing. In the meantime, I appreciate your patience.

Kind regards,

Katie Meyboom
FOI Officer
Information Management Branch
Corporate Services Division | Corporate Group
Department of Immigration and Border Protection
PO Box 25,  BELCONNEN ACT 2616
Email: [email address]

UNCLASSIFIED

-----Original Message-----
From: Katie MEYBOOM On Behalf Of FOI Reviews mailbox
Sent: Tuesday, 13 December 2016 3:01 PM
To: Ben Fairless <[FOI #2550 email]>
Subject: RE: Internal review of Freedom of Information request - Use of janusSEAL and Correspondence around same [SEC=UNCLASSIFIED]

UNCLASSIFIED
Our references: FA 16/11/00189-R1; ADF2016/65920

Dear Mr Fairless,

The Department has received your request for an internal review of the access decision finalised on 2 December 2016.

For future correspondence please note the new FA reference number for your internal review at the top of this email.

In accordance with s.54C(2) the Department will allocate your request for internal review to an officer other than the original decision maker to conduct the review.

Processing timeframe
The standard processing of an internal review is 30 days. Therefore, a decision on your internal review is due by 10 January 2017.

Please be aware that the Department of Immigration and Border Protection (the Department) has seen a significant increase in the number of FOI requests received by this agency. As a result there are expected delays involved with the processing of FOI requests at the present time. Generally, requests will be processed in the order that they are received. The Department will endeavour to finalise your request as quickly as possible.

Contacting the Department for your internal review
To contact the Department in relation to your internal review please contact us at [email address] and include your FA reference number.

Please do not hesitate to contact me should you wish to discuss.

Katie Meyboom
FOI Officer
Information Management Branch
Corporate Services Division | Corporate Group
Department of Immigration and Border Protection
PO Box 25, BELCONNEN ACT 2616
Email: [email address]

UNCLASSIFIED

-----Original Message-----
From: Ben Fairless [mailto:[FOI #2550 email]]
Sent: Sunday, 11 December 2016 12:21 AM
To: FOI <[email address]>
Subject: Internal review of Freedom of Information request - Use of janusSEAL and Correspondence around same

Dear Department of Immigration and Border Protection,

Please pass this on to the person who conducts Freedom of Information reviews.

I am writing to request an internal review of Department of Immigration and Border Protection's handling of my FOI request 'Use of janusSEAL and Correspondence around same'.

Part 1 of my request, my request was limited to: "A copy of the most current configuration settings for janusSEAL."

The decision maker, at part 9 of the decision, states that releasing the configuration for JanusSEAL would "effectively create a map for part of the Department’s IT security settings for anyone who wish to infiltrate the Department’s IT systems".

I respectfully disagree with this assessment of the document I'm seeking. The configuration information I am requesting information on only makes changes to email content (such as adding protective markers), changes to email headers (again to "mark" a document with a specific classification) and prevents specific emails being sent to specific domains which are not part of FedLink. I am not seeking information that would "create a map of the Department's IT security settings". The above information would provide the details of how the software is configured and contain parameters on how end-users interact with the software.

At paragraph 11, the decision maker states that "it would be virtually impossible to be certain that a partially redacted document contained no information that would be harmful to the Department."

One would assume that the Department hires individuals with a technical understanding who implemented JansuSEAL, in addition to Lawyers within the Freedom of Information branch. If the FOI Lawyers are not able to determine if the information would be harmful to the Department, perhaps they should seek advice from the manufacturer of the product, or from their in-house technical expertise. If you can't detail what parts of the document could "have a substantial adverse effect on the proper and efficient conduct of the operations of an agency" how can you say that the document as a whole meets this criteria?

On the Public Interest Test, I contend that there is significant public interest in understanding how multiple members in the Department have caused classified emails to be sent outside of the agency. I note that, following the relaxation of the "Auto-Complete" rules, at least one reported case where the FOI unit sent an email to a journalist containing information which was not for public consumption has been noted so far. There could be many others, and the way the software is configured plays a bit part in protecting end-users of the software from themselves.

I reserve the right to make additional contentions should this matter not be resolved in my favour at Internal Review.

A full history of my FOI request and all correspondence is available on the Internet at this address: https://www.righttoknow.org.au/request/u...

Yours faithfully,

Ben Fairless

-------------------------------------------------------------------
Please use this email address for all replies to this request:
[FOI #2550 email]

This request has been made by an individual using Right to Know. This message and any reply that you make will be published on the internet. More information on how Right to Know works can be found at:
https://www.righttoknow.org.au/help/offi...

If you find this service useful as an FOI officer, please ask your web manager to link to us from your organisation's FOI page.

-------------------------------------------------------------------

Important Notice: The content of this email is intended only for use by the individual or entity to whom it is addressed. If you have received this email by mistake, please advise the sender and delete the message and attachments immediately. This email, including attachments, may contain confidential, sensitive, legally privileged and/or copyright information.

Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. DIBP respects your privacy and has obligations under the Privacy Act 1988.

Unsolicited commercial emails MUST NOT be sent to the originator of this email.

hide quoted sections

Dear Katie Meyboom,

Can you advise the reason for the delay, and how long you expect to take to process my request for Internal Review?

Yours sincerely,

Ben Fairless

FOI Reviews mailbox,

IMPORTANT INFORMATION

Your email has been received by the Department of Immigration and Border
Protection’s Freedom of Information (FOI) Reviews Section. Please note
that we will only action and respond to FOI requests and other matters
relating to the Freedom of Information Act 1982 (FOI Act).

 

Please be aware that there has been a significant increase in the number
of FOI requests received and that there may be delays in the processing of
your application for review. Please do not send duplicate emails as this
may also cause delays in processing times.

 

As a matter of guidance, please refer to the general information below.

 

General information regarding FOI and the Disclosure Log.

Agencies are required to publish certain decisions concerning FOI
requests, on a Disclosure Log in accordance with section 11C of the FOI
Act.  Access to the Department of Immigration and Border Protection
Disclosure Log is available [1]here.

 

General information regarding travelling Australia

Information for visitors to Australia can be found [2]here.

Information regarding potential visa options can be found [3]here.

 

Requests for a copy of your Visa Refusal or Visa Grant letter

If you have lost or misplaced correspondence regarding your Visa Refusal
or Visa Grant, or you wish to confirm the authenticity of your Visa
Refusal or Visa Grant, you should contact the office where you lodged your
visa application. 

Details of our offices located around the world can be found [4]here.

 

Queries regarding your current Visa status

You can check your visa details and conditions on the Department’s Visa
Entitlement Verification Online (VEVO) portal.  If you do not have the
necessary reference numbers to access the VEVO portal, you should contact
the office where you lodged your visa application for further information.

 

Refund of Visa fees

If you are seeking a refund of fees associated with your Visa, you should
contact the office where you lodged your visa application.  Details of our
offices located around the world can be found [5]here.

 

Making a Visa application

Registered migration agents are authorised to provide immigration advice
or assistance, including advice regarding the lodgement of visa
applications. Further information on migration agents may be found
[6]here.  Please note that the Department is unable to assist you in this
regard.

 

If you are experiencing technical difficulties in lodging your visa
application through ImmiAccount, you should submit your concerns through
the ImmiAccount Technical Support Form, which is accessible [7]here.

 

Australian Citizenship

If you are seeking evidence of your Australian Citizenship, you should
complete Form 119, which can be found [8]here.  Details on where to send
your completed form may be found on page 8 of the Form.  This form will
not be actioned by the FOI Section.

 

Information on how to apply for Australian citizenship, information for
Australian citizens and Australian Citizenship Day can be found [9]here.

 

Movement Records/Travel History

If you are seeking evidence of your own travel movements/history you
should complete Form 1359, which can be found [10]here. Details on where
to send your request may be found on page 1 and 2 of the Form. This
request will not be actioned by the FOI Section.

 

Superannuation – Evidence of Immigration Status

If you are seeking evidence of your own immigration status for
superannuation purposes, you should complete Form 1194, which can be found
[11]here. Details on where to send your completed form may be found on
page 1 of the Form. This request will not be actioned by the FOI Section.

 

Update Passport Details

Information on how to update your address or passport details can be found
[12]here.

 

Notification of Change in Circumstances

If you have lodged a visa application and your circumstances have changed,
you should submit [13]Form 1022 to the office where you lodged your visa
application. Details of our offices located around the world can be found
[14]here. The FOI Section does not process these forms. 

 

Notification of incorrect answers

If you wish to correct answers that you have provided to the Department
either:

·         in a visa application

·         on a passenger card or

·         in response to a notice given to you by the Department inviting
you to comment on possible non-compliance with an obligation to correct
incorrect information

you should submit [15]Form 1023 to the Department. Details of our offices
located around the world can be found [16]here. The FOI Section does not
process these forms. 

 

Duty Free concessions

Information relating to duty free concessions can be found [17]here.

 

General Enquiries

If you have a question, which has not been answered above, and which is
about visa, citizenship, trave or trade, including brining goods in and
out of Australia, please refer to our general enquiries web form [18]here.

 

 

Yours Sincerely

FOI Reviews

Freedom of Information Section

Department of Immigration and Border Protection

Information updated 24 October 2016

 

Important Notice: The content of this email is intended only for use by
the individual or entity to whom it is addressed. If you have received
this email by mistake, please advise the sender and delete the message and
attachments immediately.  This email, including attachments, may contain
confidential, sensitive, legally privileged and/or copyright information.
 

Any review, retransmission, dissemination or other use of this information
by persons or entities other than the intended recipient is prohibited. 
DIBP respects your privacy and has obligations under the Privacy Act 1988.
 

Unsolicited commercial emails MUST NOT be sent to the originator of this
email.

References

Visible links
1. http://www.border.gov.au/about/access-ac...
2. http://www.border.gov.au/Trav/Visi
3. http://www.border.gov.au/Trav/Visa-1
4. http://www.border.gov.au/about/contact/o...
5. http://www.border.gov.au/about/contact/o...
6. https://www.mara.gov.au/
7. https://www.border.gov.au/Trav/Visa/Immi...
8. http://www.border.gov.au/Forms/Documents...
9. http://www.border.gov.au/Trav/Citi
10. http://www.border.gov.au/FormsAndDocumen...
11. http://www.border.gov.au/Forms/Documents...
12. http://www.border.gov.au/Lega/Lega/Form/...
13. http://www.border.gov.au/Forms/Documents...
14. http://www.border.gov.au/about/contact/o...
15. http://www.border.gov.au/Forms/Documents...
16. http://www.border.gov.au/about/contact/o...
17. http://www.border.gov.au/Trav/Ente/Duty-...
18. http://www.border.gov.au/about/contact/m...

FOI Reviews mailbox,

2 Attachments

UNCLASSIFIED

Our references: FA 16/11/00189-R1; ADF2016/65920

 

Dear Mr Fairless

 

I refer to your application for an Internal Review received on 11 December
2016, seeking a review of the Department’s decision of 2 December 2016, in
which you were seeking access to the following:

           

‘1) A copy of the most current configuration settings for janusSEAL. This
is an off the

shelf product being used by DIBP to classify emails. janusSEAL allows the

department to correctly classify emails in line with the Australian
Government security

classification system. [Item 1]

 

2) A copy of any correspondence in the last 3 years sent to all DIBP staff
in relation to

janusSEAL. This may not reference the product by name, but may be a
notification

sent across the agency or training piece on how to correctly classify
emails, or, for

example, what will happen if you try to send an email classified as FOUO,

PROTECTED or SECRET to a non .gov.au email address.’ [Item 2]

 

The Department has made a decision on this review application.  Please see
attached the signed review decision letter, and document  released under
the FOI Act. 

 

This request has now been closed.

 

Regards

Karen

 

Karen Tulloch | Assistant Director | Freedom of Information Section

Freedom of Information, Privacy & Records Management Branch / Corporate
Services Division

Corporate Group

Department of Immigration and Border Protection
Email: [1][email address]

 

UNCLASSIFIED

Important Notice: The content of this email is intended only for use by
the individual or entity to whom it is addressed. If you have received
this email by mistake, please advise the sender and delete the message and
attachments immediately.  This email, including attachments, may contain
confidential, sensitive, legally privileged and/or copyright information.
 

Any review, retransmission, dissemination or other use of this information
by persons or entities other than the intended recipient is prohibited. 
DIBP respects your privacy and has obligations under the Privacy Act 1988.
 

Unsolicited commercial emails MUST NOT be sent to the originator of this
email.

References

Visible links
1. mailto:[email address]