The Statement of Reasons
". . .
Reasons(s)
6. My reasons are:
a. I note that you spent much of your response to the NOSM [Notice of Suspected Misconduct] questioning the evidence that I have received and have relied upon. Whilst I appreciate that the 1822 average figure appears to be incorrect, I remain of the view that the excessiveness of your internet browsing activity remains a valid allegation to have presented to you.
b. I am disappointed that you have chosen to present your response to this allegation with such an arrogance and condescension. Rather than actually responding to the allegation, providing any sort of mitigation/explanation or demonstrating any sort of remorse for your actions, I am saddened that you have instead focussed on arguing the calculation of the 1822 figure (which I appreciate may not be correct), and have not appeared to accept any level of responsibility or sort to remedy your actions.
. . .
[Extract from document entitled "Anonymizers and the threats they pose]
In general terms, an anonymizer allows a user to view more than normally permitted on the Internet through their DRN account, while hiding the activities that the user is performing. This raises significant concerns regarding the user's activity and motivations, while preventing the ability to monitor activity against careless or malicious factors, possibly including but not limited to:
Uploading sensitive data from the DRN to direct unclassified sources.
Discussing classified information through the means of chat, blogs, and social media sites.
Viewing inappropriate material.
Visiting websites that are potentially harmful to the Defence Network.
. . .
j. Such activity in accessing these sites, from my understanding and the advice I have received from ICT Security Operations, is deliberate and calculated. Such activity is undertaken to deliberately ensure that Defence cannot detect or identify what activities you are performing whilst accessing those sites - therefore hiding your internet activity/searches. I view such action as deceptive and dishonest
k. The fact that you also went to the effort of deleting your system cookies at the end of each day (something which I am advised is not automatically done on DRN workstations) lends me to the view that you have been engaging in deceptive conduct, specifically in relation to your DRN use (and misuse). It appears to me that you utilised your IT capabilities to attempt to mask your internet activities and "cover your tracks".
. . .
b. It is also my view that given you have gone to the effort of deleting your cookies at the end of each day, you have actively utilised your IT knowledge and technical understanding to engage in activities of deception, which are forbidden by Departmental policies, and have taken calculated steps to avoid your actions being detected.
. . .
Comments
12. I have relied heavily on the technical advice I have received from ICT Security Operations in making my determination in relation to this allegation. This is because I do not have the expertise to obtain and confidently analyse the data provided by National ICT Security Operations, Investigations Support term (as our Departmental IT technical experts). I am however confident and willing to utilise the expert advice I have received in making a determination of this matter. Therefore, I do find that you have accessed anonymous search proxy's (generically referred to as anonymizers) to conduct and mask your internet search activities. This activity is not only deceptive and a breach of Departmental policy, it is also a significant security risk to the DRN (as outlined above).
. . .
ALLEGATION C: you have deliberately used an Anonymizer to hide a number of your Internet search activities, therefore bypassing Defence Network security tools. The risk posed to the DRN by your actions in allowing you to transmit and receive unsolicited data is significant.
Finding
15. I have determined on the balance of probabilities that you have, in this instance, breached the APS Code of Conduct.
. . .
…The use of anonymizers is a deliberate attempt by an individual user with the sole purpose of rendering them anonymous to network administrators and network security tools. It is activity contrary to DI(G) CIS - 6-1-001 as it may contravene the appropriate use of Defence ICT resources in some or all of the following:
Para 20 c - Has the potential to affect national security or military operations e.g. by discussing Defence activities on the internet without detection.
Para 20 d - Creates an impost on the Commonwealth e.g. is wasteful of ICT resources.
Para 20 e - Adversely impacts Defence business activity e.g. it carries the risk of allowing entry of malicious software that could adversely affect the operation of the DRN.
Para 20 g - Inappropriate use of Defence ICT Resources for personal gain e.g. Using the anonymizer to conduct personal business interests in Defence tie [sic] and thus hide that activity from detection.
Para 20 h - use Defence ICT resources in relation to inappropriate content e.g. accessing pornography, illegal imagery, gambling online.
Para 20 l - Use Defence ICT resources to engage in dishonest, deceptive or malicious practices e.g. undertaking activities that breach the APS or Military Codes of Conduct.
. . .
a. I appreciate that I am unable to categorically conclude what it was that you were searching for/viewing/accessing whilst you were utilising anonymizer sites and so the link between the content viewed and any associated policy breach cannot be ascertained. Having said that however, in general, your active seeking and utilisation of anonymizer sites is not permitted by Departmental policies, and as such constitutes a breach in itself.
….
c. I am disappointed that you have displayed no acceptance for your actions in relation to this matter. From your response to the NOSM, I consider that you have viewed this entire misconduct process as farcical and comedic. The lack of responsibility and accountability for your actions is highly concerning to me and indicates that you have no appreciation for the severity with which the Department views your actions.
d. Furthermore, you have taken no remedial action that I can see and I am disappointed that you, particularly as an employee who I would expect would have a higher than average knowledge of the IT environment, have chosen to mock this process and the evidence collected and have come across (deliberately or otherwise) as dismissive and defiant.
. . .
Comments
26. As Delegate of the Secretary of Defence, I am unable to view your actions in this matter with anything other than the highest level of concern. This is especially due to what the user of anonymizer sites could do (upload classified Defence information, access high level pornographic material etc) and not necessarily what the user did do. The fact remains that regardless of what you may have been doing whilst utilising the anonymizers, accessing such tools is forbidden and will not be tolerated.
. . .
28. My role in proposing an appropriate sanction for your breaches of the APS Code of Conduct must take consideration of a number of factors relevant to this matter. That is, any sanction that I propose must:
a. communicate the seriousness with which the Department views your actions;
b. address the significant risks your actions have posed to the DRN;
c. demonstrate the seriousness of this misconduct process;
d. communicate the need for you to respect, understand and most importantly comply with departmental requirements; and
e. communicate to the broader Department that such action is not acceptable and will not be tolerated by the Department of Defence.
29. As such, considering all factors relevant to this matter, I am presently of the view that the termination of your employment is the appropriate sanction to propose."