Custom compliance frameworks

We can really build anything as a custom framework. Obviously it should be driven by a specific purpose or compliance goal that you have. That might be satisfying a specific customers' requirements, a regulation that we don't already cover in our audits, or even just for internal risk or operating control purposes. We just need a clear view of what is or should be part of that framework in order to build it in a digital form with the right corresponding controls.

In most cases, you'll use the custom framework to show stakeholders how you meet that framework. For example, if your customer has specific requirements for you to adhere to, we can build that custom framework and map your actual business activities (controls) to it to demonstrate how you meet those requirements. That may be just showing that mapping and your monitoring of those controls, or you may conduct an audit to verify your compliance and provide a report to your stakeholders to prove your compliance with that independent validation. 

For other clients previously, we have built:

• The Commonwealth Bank of Australia's Tier 1 vendor governance requirements;
• The Australian and New Zealand Privacy Principles
• Essential 8
• APRA's CPS 234
• CDR Representatives to suit the specific requirements of our CDR Principle partners