Continuous Assurance for APRA workloads

Australian FSI workloads in the cloud must be deployed on platforms that are not only secure but shown to be compliant to relevant regulatory frameworks and industry standards such as APRA CPS 231, 232, 234 and 235, PCI-DSS, and ISO 27001. Regulators are now focusing not only on the implementation of controls but also customers introducing programs to measure the ongoing effectiveness of the controls and the ability to mitigate the intended risk.

This offering is designed to assist Australian financial services organisations that are regulated by APRA (Australian Prudential Regulation Authority), such as banks, insurance companies, and other financial institutions

Mantel Group’s approach to continuous assurance enables customers to increase visibility into control effectiveness

Continuous Monitoring Real time visibility of risk, controls and data across security operations, application and infrastructure from network services to cloud services.

Continuous Reporting Continuous dashboard access to live KPI’s and targeted role based insights. Personalised views complimented by regular snapshot and highlight reports.

Continuous Auditing Automation of error checking and verification in real time. Holistic view across data assurance, security controls and risk.

Continuous Compliance A proactive culture and capability focussed on real time posture management against all relevant risks, standards and frameworks

Mantel Group Continuous Assurance for APRA workloads:

Mantel Group will conduct a discovery and planning workshop in collaboration with your team using AWS Well-Architected, industry frameworks to help you understand your compliance landscape and continuous assurance objectives. We will evaluate options with you and produce recommendations that are appropriate for your organisation. These recommendations will employ the use AWS cloud-native solutions to build a platform to provide increased real-time visibility into compliance against industry regulation requirements including but not limited to APRA.

The deliverables for the assessment will include:

• A workshop to evaluate current state of continuous assurance capability
• Recommended next steps and business outcomes to be achieved
• A Statement of Work to deliver on the recommendations provided