Security Policy

Effective Date: 29 June 2026

1. Our Commitment to Security

Career Compass is committed to protecting the confidentiality, integrity, and availability of the information entrusted to our platform.

We recognise that students, universities, employers, and partner organisations rely on Career Compass to securely manage career development, internship placements, and organisational collaboration. Security is integrated into the design, development, and operation of our platform.

2. Information Security

Career Compass employs industry-standard security practices designed to safeguard user information against unauthorised access, disclosure, alteration, or destruction.

Our security measures include:

Secure user authentication
Encrypted communications (HTTPS/TLS)
Role-based access controls
Secure password management
Regular software updates and security patches
Monitoring for suspicious activity
Secure cloud infrastructure
Routine system maintenance

3. Access Control

Access to Career Compass is controlled through authenticated user accounts.

Permissions are assigned based on user roles, including:

Students
Employers
University Administrators
Placement Coordinators
System Administrators

Users can only access information necessary for their authorised role.

4. Data Protection

Career Compass is designed to protect sensitive information including:

Student profiles
Academic information
Internship applications
Employer records
Placement documentation
Progress reports
Communication records

Data is protected using secure transmission protocols and controlled access mechanisms.

5. Password Security

Users are responsible for maintaining the confidentiality of their login credentials.

We recommend that users:

Create strong, unique passwords.
Avoid sharing login credentials.
Change passwords regularly.
Immediately report suspected unauthorised access.

Career Compass will never request your password via email.

6. Platform Monitoring

To maintain platform integrity, Career Compass may monitor:

Authentication attempts
Failed login activity
Suspicious user behaviour
Platform performance
Security events

Monitoring is conducted solely to improve security, maintain service reliability, and protect users.

7. Vulnerability Management

Career Compass regularly reviews and updates its platform to address emerging security risks.

This includes:

Applying security updates
Monitoring software dependencies
Addressing identified vulnerabilities
Reviewing system configurations
Improving security controls as technology evolves

8. Responsible Disclosure

We appreciate responsible security research.

If you believe you have discovered a security vulnerability within Career Compass, please notify us immediately.

Please include:

A description of the issue
Steps to reproduce the vulnerability (if applicable)
Screenshots or supporting evidence
Your contact information

Please do not publicly disclose vulnerabilities until they have been investigated and addressed.

Security reports can be submitted to:

📧 pr@dncouncil.org

9. User Responsibilities

Users are expected to:

Protect their account credentials.
Keep devices secure.
Use the platform responsibly.
Report suspected security incidents promptly.
Avoid attempting unauthorised access to any part of the platform.

Any misuse of Career Compass may result in suspension or termination of user access.

10. Incident Response

If a security incident occurs, Career Compass will:

Investigate the incident promptly.
Contain and mitigate any identified risks.
Restore affected services where necessary.
Notify affected users where required by applicable law.
Review the incident to strengthen future security measures.

11. Third-Party Services

Career Compass may rely on trusted third-party providers for hosting, authentication, analytics, email delivery, and other platform services.

Where third-party providers are used, we seek to work with organisations that maintain appropriate security standards and data protection practices.

12. Policy Updates

This Security Policy may be updated periodically to reflect improvements in technology, regulatory requirements, or platform operations.

The most recent version will always be published on our website with an updated Effective Date.

13. Contact Us

For security-related enquiries or to report a suspected vulnerability, please contact:

Career Compass

Career Management System

Melbourne, Victoria, Australia

Security Team

📧 pr@dncouncil.org

General Support

📧 pr@dncouncil.org

🌐 pr@dncouncil.org

Our Commitment

At Career Compass, protecting the information of our students, universities, employers, and partners is fundamental to everything we do. We continuously improve our security practices to provide a reliable, trustworthy, and secure platform that supports meaningful career development and collaboration.