APRA CPS 234 & ISO 27001 Case Study
Client | Wealth Management ASX listed company
Engagement Overview
AJQ Technology was engaged by and Investment Company across two phases of work to support the organisation in meeting APRA CPS 234 obligations and subsequently achieving ISO 27001 certification. The engagements provided senior delivery capacity for the more complex policy, process, and control workstreams that the internal team did not have capacity to execute.
Scope & Complexity
The work spanned the full information security policy and process framework required to evidence CPS 234 compliance, followed by the implementation activities required to bring the organisation to ISO 27001 certification. Both programmes were subject to independent review by external partners, including one of the BIG Four, requiring all artefacts to meet the standard expected by independent assurance providers.
AJQ Approach
AJQ provided senior consultants who stepped into the harder workstreams of each programme, working alongside the client’s internal team and external partners. AJQ produced policies, processes, and supporting documentation to a standard suitable for independent verification, and supported the client through the assurance and audit cycles.
Outcomes Achieved
- CPS 234 policy and process framework implemented and operating
- ISO 27001 implementation delivered and independently verified
- Outputs accepted by external assurance partners including KPMG