Amstelveen Amstelveen
Capability and insights

Your partner in navigating Risk, Compliance, and Technology

Amstelveen is a specialist provider of risk, compliance and technology expertise, operating across a range of business sectors.

The Latest

Audit and Assurance

Building Risk-Based Internal Audit Plans: From Coverage to Prioritisation

16 Sep 2026

Introduction Organisations continue to face increasing regulatory expectations, growing risk complexity and ongoing pressure on Internal Audit capability and capacity. At the same time, Boards and Audit Committees expect assurance that is aligned to organisational priorities and focused on the risks, decisions and activities that have the greatest potential impact on organisational outcomes. The IIA […]

Read the article
Compliance and Regulation

Submission to CPS 510 Governance Review Consultation Paper

2 Sep 2026

APRA Policy Team, Amstelveen welcomes the opportunity to provide feedback on APRA’s proposed revisions to Prudential Standard CPS 510 Governance (CPS 510). Amstelveen is a specialist risk and compliance consultancy which operates across Australia and New Zealand. Our response is informed by our experience advising financial services organisations on governance, risk management, operational resilience, accountability […]

Read the article
Business Risk and Resilience

Why Resilience is a Strategic Capability

20 Aug 2026

In an era of compounding risks, the organisations that navigate crises best are not merely prepared. They are strategically anchored, operationally composed and trusted when it matters most. Resilience is often viewed through the lens of operational readiness, but its impact reaches much further. As disruption becomes more interconnected across technology, customers, regulators and reputation, […]

Read the article
Compliance and Regulation

Regulatory Spotlight on AI Risk Management

4 Aug 2026

ASIC and APRA’s Letters to Industry In May 2026, APRA and ASIC issued letters to industry outlining their expectations for the governance, oversight and management of Artificial Intelligence (AI). The communications reflect the increasing regulatory focus on AI adoption across financial services and the associated risks and opportunities. The letters arrive at a time of […]

Read the article
Business Risk and Resilience

CPS 230: Moving from Implementation to Operating Discipline

18 Jun 2026

A new phase of regulatory expectations Since 1 July 2025, APRA‑regulated entities have been implementing CPS 230 Operational Risk Management (the Standard). This has involved identifying critical operations, establishing tolerance levels, uplifting business continuity arrangements, and strengthening service provider governance. The 1 July 2026 milestone marks a shift in expectations. With transition arrangements now complete, […]

Read the article
View All
Featured story

Internal Audit Focus Areas for 2026

Organisations continue to face heightened regulatory oversight, rapid technological change, and growing expectations around governance, risk management, and operational resilience. Internal Audit plays a critical role in providing assurance that risk and control frameworks are effective and aligned to strategic objectives. The IIA Global Internal Audit Standards (GIAS) raise the bar on risk-based planning, technology […]

Read the article

Our Services

Amstelveen equips organisations to identify, assess, and mitigate their most significant risks. Our risk, compliance, and technology professionals support clients to make risk informed, strategic choices that improve the governance of their organisations.

View all services
Risk Transformation
GRC Systems and Solutions
Business Risk and Resilience
Technology and Cyber Risk
Audit and Assurance
Compliance and Regulation

Follow us on LinkedIn for the latest industry news and insights

Global knowledge distilled and analysed

Follow us on LinkedIn
Featured story

Six Months of CPS 230: What does the next phase of resilience look like?

As APRA sharpens its focus on operational risk and organisations continuously embed regulatory requirements, the evolving business continuity landscape has exposed key areas where organisations can evolve to build true operational resilience. CPS 230 Embedment Retrospective It has now been six months since the Australian Prudential Regulatory Authority (APRA) has enforced Prudential Standard (CPS) 230 […]

Read the article

A culture of integrity

Who we are

Lead the way

Challenging society to do the right thing

Honesty, always

We stand up for what we believe in, no matter what

Grow together

Our success is measured through the growth of others

Make work fun

Excellence can only be achieved by doing what we love

“Amstelveen were flexible in adapting to the unexpected changes to our needs, which was immensely appreciated.”

Senior Risk Director | Telecommunications