Workday Cybersecurity Assessment Case Study
Client | Wealth Management ASX listed company
Engagement Overview
AJQ Technology was engaged by an Investment Company to conduct a cybersecurity assessment of a Workday implementation spanning all five entities in the group. The objective was to provide independent assurance that the new platform would not weaken the client’s risk position or compromise compliance with ISO 27001, APRA CPS 234, or APRA CPS 230.
Scope & Complexity
Key complexity factors included
- Assessing controls across five distinct legal entities within a single group structure
- Mapping the Workday solution design against the client’s existing ISO 27001 ISMS scope and Statement of Applicability
- Testing alignment with CPS 234 information security obligations and CPS 230 operational risk and material service provider requirements
- Producing findings that could be actioned ahead of go-live without disrupting the implementation timeline
AJQ Approach
AJQ assessed the proposed Workday solution and supporting operational arrangements across all five entities, identifying control implications, regulatory touchpoints, and residual risks. Findings were prioritised and presented in a form the client could action within the implementation programme.
Outcomes Achieved
- Independent assurance position established across all five entities
- Confirmation that ISO 27001, CPS 234, and CPS 230 positions were not compromised by the Workday implementation
- Prioritised remediation roadmap delivered for items requiring attention before go-live