This follows recommendations from the Victorian Ombudsman in May 2022 that DFFH implements a procedure to periodically check the currency of user lists for CRISSP.
CRISSP and CRIS is the client information and case management system designed to improve services and facilitate the provision of coordinated care. This system seeks to support and facilitate the use of data by DFFH and the community services sector to satisfy statutory and contractual responsibilities.
The primary safeguard for protecting information held in CRIS and CRISSP involves revoking user access when employees cease working in a relevant role at a funded organisation. Complying with user management procedures is a contractual requirement under the Agreement for the access to and use of information on the CRIS and CRISSP systems (‘the Agreement’).
Under the Agreement, funded organisations must appoint an Organisation Authority (OA) who is responsible for keeping CRIS and CRISSP access permissions up to date and ensuring that people only have access where it is essential for their work.
The last CRIS and CRISSP user access audit was completed in September 2024.
Questions about the audit program should be directed to ClientInformationSystems.Audit@dffh.vic.gov.au.
Questions about Privacy can be referred to your organisation’s Agency Performance and System Support (APSS) Adviser.