Appendix A - Information for online service customers

Education and advice for customers using agency online services can benefit the security of the authentication system. Agencies have a responsibility to inform their customers of what they can expect from the agency, for example with regard to protection of customer information, record retention etc. Information provided to online service customers should include the following elements:

• appropriate advice on protection for the customers computing environment. Useful and readily comprehensible sources of advice include the Internet Safety Group (www.netsafe.org.nz) and the AOEMA SafetyNet Guide (available in electronic form from www.aoema.org)
  
• life cycle requirements that affect the authentication key (destruction requirements, etc.)
• customer responsibilities
  
• processes and procedures relating to compromise or suspected compromise of the authentication key
  
• the agency’s responsibilities to its online service customers.