RSS web feeds 
Share 
Print 
Email 
Save ContactPoint: Access and security
Who will access ContactPoint?
Access to ContactPoint is strictly limited to trained and vetted practitioners who need it to do their job. This includes those working in education, health, social care, youth justice and some voluntary organisations.
Before being granted access, users will have completed mandatory ContactPoint training and other relevant training (such as information sharing). They must have security clearance, including enhanced Criminal Records Bureau (CRB) disclosure, and will need a username, PIN, security token and password. Access is audited and monitored.
How is ContactPoint accessed?
Authorised users can access ContactPoint in three ways, through:
- a secure web link
- some existing case management systems
- another authorised user (where appropriate ICT is unavailable).
Wherever possible, ContactPoint is automatically updated from existing systems, avoiding the need for practitioners to enter information on separate systems. It is not possible for authorised users to access case-management systems, or to see case data held by another agency on ContactPoint.
Security
Security is a priority and there are significant security measures in place. ContactPoint has undergone many levels of testing and design review, and meets recognised assurance levels for security. ContactPoint is compliant with the international standard for Information Security Management System (ISMS) (ISO/IEC 27001) and meets Her Majesty's Government (HMG) standards for information assurance (IA).
There is an ongoing commitment to security and regular testing will be carried out.
Associated documents
ContactPoint: Security statement
(34.1Kb)
Download the contents of this page:
as a Word Document
Last updated on 26/01/2009
