Menu

Experience

A selection of recent engagements across governance, risk & compliance and cyber security. Client names are withheld.

  • Cyber security
  • Security testing
  • AI-assisted

Penetration testing across applications and systems

  • Manual penetration testing combined with automation and AI-assisted testing
  • Web applications and APIs
  • Mobile applications
  • Point-of-sale (POS) systems
  • Warehouse management systems
  • LLM applications and agentic AI systems
  • Validated findings, risk ratings and remediation advice for technical and management audiences
  • GRC
  • APRA CPS 234

Security controls testing function

  • Established a controls testing framework to fulfil APRA CPS 234 obligations
  • Established the controls testing program
  • GRC
  • ISO/IEC 27001

ISO 27001 certification

  • Advisory services to establish ISO 27001 certification
  • Developed information security policy and standards
  • Developed the information security risk management framework
  • Conducted the information security risk assessment
  • GRC
  • ISO/IEC 27001:2022

Cyber security policy framework

  • Established security policy and standards based on ISO/IEC 27001:2022
  • GRC
  • Supplier security

Member administration services migration — security advisor

  • Developed security requirements for the new member administration services provider
  • Developed security clauses for the supplier contract
  • Provided information security advice to the migration team
  • GRC
  • APRA CPS 234
  • ISO/IEC 27001

CPS 234 & cyber security governance

  • Gap assessment against APRA CPS 234
  • Established information security policy and standards to meet CPS 234 and ISO 27001
  • Uplifted security functions to fulfil CPS 234 requirements
  • Uplifted the supplier assessment function and contract security clauses
  • GRC

Information security governance & risk management function

  • Established the information security risk management framework
  • Implemented the information security governance function
  • Developed the information security controls register
  • Conducted the information security risk assessment
  • Established the supplier assessment function and uplifted contract clauses
  • Cyber security

Cyber security advisory for IT transformation

  • Developed security policy and standards to support the transformation
  • Conducted security design and configuration assessments
  • Security advisory to the transformation and ad-hoc projects
  • Developed the staff security awareness program
  • GRC
  • Data governance

Data governance foundations

  • Established data governance requirements
  • Developed the data governance business case
  • Developed the implementation plan

Have a similar challenge?

Tell us about it. We’ll tell you honestly whether we’re the right fit.

Contact us hello@deteqted.com