APRA CPS 234 Guide
Plan, establish, document and maintain compliance under Prudential Standard CPS 234 Information Security against ISO/IEC
27001.
Getting started with ISO/IEC 27001 Information Security Management
Introduce ISO/IEC 27001 to your business and discover how the information security management standard is designed to meet your specific needs.
What is ISO/IEC 27001 Information Security Management?
ISO/IEC 27001 is the international standard for information security management. It outlines how to put in place an independently assessed and certified information security management system. This allows you to more effectively secure all financial and confidential data, so minimising the likelihood of it being accessed illegally or without permission.
With ISO/IEC 27001 you can demonstrate commitment and compliance to global best practice, proving to customers, suppliers and stakeholders that security is paramount to the way you operate.
What are the benefits of 27001 Information Security Management?
- Identify risks and put controls in place to manage or eliminate them
- Flexibility to adapt controls to all or selected areas of your business
- Gain stakeholder and customer trust that their data is protected
- Demonstrate compliance and gain status as preferred supplier
- Meet more tender expectations by demonstrating compliance
Are you confident your organization is secure and compliant with the APRA Prudential Standards?
All APRA-regulated entities need to prove they have the required capability, controls and internal audit assurance to confirm their information security resilience. Your organization may be secure, but your business partners and supply chain must also be compliant under CPS 231. BSI is able to assess your frameworks and policies and train your staff to help you meet the requirements of CPS 234 and CPS 231.
