Interestingly the online newspaper 'The Ethics Daily' has picked up Migration Alliance's story about OMARAs random audit emails. It would appear that if an Online Ethics Paper is running a story on OMARA's 'random audit' emails then there may be a problem.
Now, with respect to the overall security of the Qualtrics surveys that OMARA uses, it would appear that anyone with access to the nominated email address or who has been forwarded the email by the RMA, could complete the survey for and on behalf of the RMA. We have tested it and found that there is no mechanism for an RMA to actually “prove” their identity prior to completion of the survey. A 12 year old child could complete the survey if their parent left the email open and the RMA would be none the wiser.
Just as an RMA needs to log into the OMARA website to complete certain formal processes, so should they have to log into the website and have their ID captured and verified properly before they complete a survey, where the information is gathered and could later 'incriminate' them and lead to S308 and S309 notices.
I have written to the OMARA on more than one occasion about this glitch, and suggested that a solution to this problem would be that the OMARA ask agents to log in before completing the survey, and that access to the survey can only be obtained after login.
...