New Product Cybersecurity Review Case Study
Client | Wealth Management ASX listed company
Engagement Overview
AJQ Technology was engaged by a Wealth Management company to assess a new product ahead of launch. The assessment was required to confirm that the product and its supporting technology would not break alignment with the client’s existing ISO 27001 certification or its obligations under APRA CPS 234 and CPS 230.
Scope & Complexity
The review covered both the product design and the operational arrangements supporting it, with control assessment across
- Information security controls under ISO 27001
- Information security regulatory obligations under CPS 234
- Operational risk and material service provider obligations under CPS 230
AJQ Approach
AJQ conducted an end-to-end review of the new product, identifying control gaps and prioritising findings against the client’s existing certification and regulatory commitments. The output enabled the client to make an informed go or no-go decision at launch and to address any residual gaps before the product entered the market.
Outcomes Achieved
- Independent assurance position on the new product against ISO 27001, CPS 234, and CPS 230
- Prioritised remediation list for items requiring action ahead of launch
- Clear evidence trail for internal governance and regulatory submission