APRA CPS 234 Enablement
APRA CPS 234 makes the board accountable for information security. We help financial services and superannuation entities meet it — and demonstrate it.
We have established CPS 234 programs end to end: assessing the gap, writing the policy and standards, uplifting the security functions that fall short, and building the controls testing program that gives the board evidence rather than assurance by assertion.
Because CPS 234 reaches into your third parties, we also uplift supplier assessment and the security clauses in supplier contracts — often the part of the standard that takes longest to get right.
What we deliver
- Gap assessment against APRA CPS 234
- Information security policy and standards to meet CPS 234 and ISO 27001
- Uplift of security functions to fulfil CPS 234 requirements
- Controls testing framework and program to meet CPS 234 obligations
- Supplier assessment function and contract security clauses
- Cyber security governance and reporting
Related services
You might also need
ISO/IEC 27001 Certification & Uplift
From first gap to certification, aligned to ISO/IEC 27001:2022, with an ISMS your team can run.
Learn moreSecurity Governance, Policy & ISMS
Policy, standards, processes and procedures, an ISMS and a governance function that runs it — plus data governance foundations.
Learn moreInformation Security Risk Management
Risk management frameworks, risk assessments and registers that support real business decisions.
Learn moreLet’s make security simple.
Tell us where you are and where you need to be. We’ll come back with a clear, practical view of what it takes to get there.