CyberCX Uses ATO on AWS to Help Customers Enhance Security and Speed up Regulatory Compliance

To help AWS customers meet their Australian regulatory and compliance requirements, CyberCX joined the Authority to Operate (ATO) on AWS Program. By doing so, it has joined a community of like-minded organizations and AWS security strategists focused on delivering new capabilities that both support and accelerate customers’ abilities to meet their cybersecurity goals. “We were interested in the ATO on AWS Program because of its focus on compliance and assurance, which is right in line with the work we do,” Baussmann says.

To qualify for the program, CyberCX underwent a thorough and comprehensive evaluation process to meet specific technical requirements. “Some of the requirements were standard and others were specific to the government work we do,” says Baussmann. “Although the process was arduous at times, it ensured that we were well-qualified to join the program.”

Once CyberCX qualified, it became the first Australian company to gain the ATO on AWS designation. “The ATO on AWS Program helps us give our customers an extra level of assurance that their AWS workloads are meeting Australian government security requirements,” explains Baussmann. “As a partner, we can now better help our customers prepare for IRAP assessments and even conduct them ourselves, depending on the customer.”

Through the ATO on AWS Program, CyberCX has simplified security processes for its customers with workloads on AWS. “Because of our ATO on AWS designation, we are helping improve our customers’ security postures and giving their end customers—such as the Australian government—more confidence that the right authorizations are in place,” says Baussmann.

For example, CyberCX worked with ICNL to clearly understand the complexities around meeting IRAP compliance requirements. It separated ICNL’s AWS accounts and helped AWS security services such as AWS Security Hub and then completed the documentation of ICNL’s system security plans, risk management framework, and security policies. CyberCX also supports ICNL with continuous monitoring of its application environment. “We helped ICNL uplift its security environment to meet Australian government standards,” says Baussmann. “Now, government and defense industry organizations can see that the information ICNL provides is properly protected.” Adds Warren Jansen, Executive Director at ICNL, “My experience working with CyberCX to date has been collaborative and positive. I encourage others to have a chat with them about their cybersecurity needs.”