11
1 E-Courts: Toward E-Courts: Toward Information Information Protection Protection Management Management Structures Structures Presentation to the RNSA Workshop Presentation to the RNSA Workshop Social Implications of Security Measures” Social Implications of Security Measures” University of Wollongong University of Wollongong 29 May 2006 29 May 2006 Mark Burdon & Dr. Lauren May Mark Burdon & Dr. Lauren May Information Security Institute (ISI) Information Security Institute (ISI) Queensland University of Technology Queensland University of Technology

E-Courts: Toward Information Protection Management Structures

  • Upload
    larya

  • View
    14

  • Download
    0

Embed Size (px)

DESCRIPTION

E-Courts: Toward Information Protection Management Structures. Presentation to the RNSA Workshop “Social Implications of Security Measures” University of Wollongong 29 May 2006 Mark Burdon & Dr. Lauren May Information Security Institute (ISI) Queensland University of Technology. - PowerPoint PPT Presentation

Citation preview

Page 1: E-Courts: Toward Information Protection Management Structures

1

E-Courts: Toward E-Courts: Toward Information Information Protection Protection

Management Management StructuresStructuresPresentation to the RNSA Workshop Presentation to the RNSA Workshop

““Social Implications of Security Measures”Social Implications of Security Measures”University of WollongongUniversity of Wollongong

29 May 200629 May 2006

Mark Burdon & Dr. Lauren MayMark Burdon & Dr. Lauren MayInformation Security Institute (ISI)Information Security Institute (ISI)

Queensland University of TechnologyQueensland University of Technology

Page 2: E-Courts: Toward Information Protection Management Structures

2

IntroductionIntroduction

Electronic courts (e-courts) researchElectronic courts (e-courts) research Relatively un-chartered territoryRelatively un-chartered territory

Background paper to raise potential Background paper to raise potential IS issuesIS issues Lessons learnt - USA to AustraliaLessons learnt - USA to Australia

Develop IS management structures Develop IS management structures & standards& standards Specific to e-courtsSpecific to e-courts

Page 3: E-Courts: Toward Information Protection Management Structures

3

DefinitionsDefinitions Information protection Information protection isis

information securityinformation security Defining e-courtsDefining e-courts

The “paperless trial”, the web-based The “paperless trial”, the web-based forum or the automated process?forum or the automated process?

““a body with an adjudicative a body with an adjudicative function that makes use of ICTs to function that makes use of ICTs to run proceedings.”run proceedings.”

Defining courtroom technologyDefining courtroom technology ……generic expression…numerous forms generic expression…numerous forms

of technology…may or may not be of technology…may or may not be present in a courtroom. (Lederer, 2005)present in a courtroom. (Lederer, 2005)

Page 4: E-Courts: Toward Information Protection Management Structures

4

E-courts in ActionE-courts in Action Courtroom 21 - the “paperless court”Courtroom 21 - the “paperless court”

http://www.bbcworld.com/content/clickonlhttp://www.bbcworld.com/content/clickonline_archive_45_2004.asp?pageid=666&coine_archive_45_2004.asp?pageid=666&co_pageid=2_pageid=2

Page 5: E-Courts: Toward Information Protection Management Structures

5

Overview of Integrated E-Overview of Integrated E-courtscourts

Page 6: E-Courts: Toward Information Protection Management Structures

6

E-courts & IS – The US E-courts & IS – The US ExperienceExperience

National Center for State Courts (NCSC) National Center for State Courts (NCSC) E-courts Conference 2004E-courts Conference 2004

Messing & Teppler Messing & Teppler Transparency and reliabilityTransparency and reliability challenges challenges Issues of Issues of trust and integritytrust and integrity of judicial orders of judicial orders Real-life Californian example Real-life Californian example ““no longer can we presume courts have no longer can we presume courts have

authoritative recordauthoritative record … … unless court unless court computer security is technically assuredcomputer security is technically assured” ”

Page 7: E-Courts: Toward Information Protection Management Structures

7

Implications for Australian Implications for Australian E-courtsE-courts

QUT E-courts Conference - QUT E-courts Conference - CaelliCaelli 20032003

SMH e-court layoutSMH e-court layout Three potential issuesThree potential issues

End to end security End to end security Security of court archivesSecurity of court archives Time/date stamping & electronic Time/date stamping & electronic

signaturessignatures Security issues to addressSecurity issues to address

Page 8: E-Courts: Toward Information Protection Management Structures

8

Preliminary Findings & Preliminary Findings & ContentionsContentions

Lack of formal researchLack of formal research Ad hoc development to process Ad hoc development to process

realignmentrealignment Initially… limited ICT use – small riskInitially… limited ICT use – small risk Now…court systems re-aligning processesNow…court systems re-aligning processes Future…increasing risk Future…increasing risk

Courts need Courts need total confidencetotal confidence in the in the integrityintegrity of their systems of their systems Significant damage to court reputationSignificant damage to court reputation Society trust in court decisions Society trust in court decisions Critical information infrastructureCritical information infrastructure

Page 9: E-Courts: Toward Information Protection Management Structures

9

Next StepsNext Steps ARC Linkage GrantARC Linkage Grant Develop Develop IS management structuresIS management structures

Identify usage properties & match to IS Identify usage properties & match to IS techniques techniques

““Lessons learnt” from the USALessons learnt” from the USA Develop Develop IS standardsIS standards

Quality service of technology Quality service of technology Achieve fundamental security goalsAchieve fundamental security goals A conceptual “set of standards”A conceptual “set of standards” Upper management to best practice Upper management to best practice

checklistchecklist

Page 10: E-Courts: Toward Information Protection Management Structures

10

SummarySummary ICT usage is increasing in courtsICT usage is increasing in courts National interest - integrity of E-court National interest - integrity of E-court

processprocess System of certainty could becomeSystem of certainty could become uncertainuncertain Instability could weaken trust & confidence Instability could weaken trust & confidence

IS frameworkIS framework vital to e-court vital to e-court development development While structures are constructed While structures are constructed Central and not afterthought Central and not afterthought

Challenge automatic assumptionsChallenge automatic assumptions Informed policy making about future of IS & e-Informed policy making about future of IS & e-

courts courts

Page 11: E-Courts: Toward Information Protection Management Structures

11

Thank YouThank You Questions?Questions? Email: [email protected]: [email protected]