Governance, Risk & Compliance
We build the governance, risk and compliance capability regulators, auditors and boards expect — and leave it running, owned by your team.
Our approach
Obligations into capability
Most of our work starts with an obligation: an APRA prudential standard, an ISO certification, a supplier contract that needs real security clauses, or a board that wants evidence. We turn those obligations into policy, process and evidence that stands up to scrutiny, without building a bureaucracy around it.
We have established CPS 234 and cyber security governance programs, taken organisations to ISO 27001 certification, set up information security risk management and supplier assessment functions from scratch, and built the controls testing programs that prove it all works.
GRC
What we deliver
APRA CPS 234 Enablement
Gap assessment, governance and controls testing for financial services and superannuation.
Learn moreISO/IEC 27001 Certification & Uplift
From first gap to certification, aligned to ISO/IEC 27001:2022, with an ISMS your team can run.
Learn moreSecurity Governance, Policy & ISMS
Policy, standards, processes and procedures, an ISMS and a governance function that runs it — plus data governance foundations.
Learn moreInformation Security Risk Management
Risk management frameworks, risk assessments and registers that support real business decisions.
Learn moreSupplier & Third-Party Security
Supplier assessment functions, contract security clauses and security requirements for new providers.
Learn moreControls Testing & Security Testing Programs
Controls testing frameworks and programs that give boards and regulators evidence, not assertions.
Learn moreOur product
Run your GRC program on ControlDesk
The cyber GRC platform we built from this practice: one register for risks, controls, obligations, suppliers and decisions, with APRA CPS 230 and CPS 234 packs built in and hosted in Australia.
Let’s make security simple.
Tell us where you are and where you need to be. We’ll come back with a clear, practical view of what it takes to get there.