Amstelveen Amstelveen
Capability and insights

Your partner in navigating Risk, Compliance, and Technology

Amstelveen is a specialist provider of risk, compliance and technology expertise, operating across a range of business sectors.

The Latest

Audit and Assurance

Strengthening CPS 230 Resilience Through Internal Audit

2 Feb 2026

Since 1 July 2025, APRA’s Prudential Standard CPS 230 Operational Risk Management has been fully enforceable. The standard now shifts the focus from readiness to demonstrating resilience, requiring entities to prove that operational risk frameworks, business continuity plans and service provider arrangements operate effectively in practice. Under CPS 230, Internal Audit has two mandated responsibilities: […]

Read the article
Business Risk and Resilience

Six Months of CPS 230: What does the next phase of resilience look like?

15 Dec 2025

As APRA sharpens its focus on operational risk and organisations continuously embed regulatory requirements, the evolving business continuity landscape has exposed key areas where organisations can evolve to build true operational resilience. CPS 230 Embedment Retrospective It has now been six months since the Australian Prudential Regulatory Authority (APRA) has enforced Prudential Standard (CPS) 230 […]

Read the article
Business Risk and Resilience

Submission to the Guiding Principles to Embed Zero Trust Culture

25 Mar 2025

Amstelveen welcomes the opportunity to provide feedback on the proposed guiding principles to embed a Zero Trust Culture across the whole of Government.
Amstelveen is a specialist risk, technology and compliance consultancy which operates across Australia and New Zealand. Our clients include public and private sector organisations which generally have a high degree of exposure to technology and cyber-related risks, such as those in government, financial services, telecommunications and energy.
In this submission, we have responded to a subset of the questions listed in the consultation paper titled “Guiding Principles to embed Zero Trust Culture”. Our response follows the review of the Zero Trust Culture principles listed in the consultation paper, and the Protective Security Policy Framework (PSPF) release in 2024.

Read the article
Audit and Assurance

Areas for Internal Audit Focus in 2025

15 Nov 2024

As organisations face evolving operational, technological, and regulatory challenges, Internal Audit functions must adapt their assurance plans to ensure that activities and insights remain of high relevance to Boards and Executives. In this article, we highlight key themes to help Internal Audit teams enhance their capabilities, align with strategic objectives, and use new technologies to […]

Read the article
Business Risk and Resilience

A Proactive Approach to Manage Crises

6 Nov 2024

Heightened focus on cyber attacks, service outages and supply chain disruptions has made crisis management more important than ever, yet increasingly more complex. With these newfound complexities in the business landscape, there are opportunities for organisations of all sizes to enhance their crisis preparedness. This document presents a lifecycle approach to uplift organisational resilience and […]

Read the article
View All
Featured Story

Key Compliance and Regulatory Themes for 2025

The risk themes of global turmoil, organisational resilience, climate change and data privacy have shaped the Australian regulatory environment during the last two years. With continued media focus on customer data breaches, service outages, conflicts and severe weather events over the past 12 months, these will likely continue to be a focus in the coming year. This outlook covers key highlights across the Australian regulatory landscape during the coming year.

Read the article

Our Services

Amstelveen equips organisations to identify, assess, and mitigate their most significant risks. Our risk, compliance, and technology professionals support clients to make risk informed, strategic choices that improve the governance of their organisations.

View all services
Risk Transformation
GRC Systems and Solutions
Business Risk and Resilience
Technology and Cyber Risk
Audit and Assurance
Compliance and Regulation

Follow us on LinkedIn for the latest industry news and insights

Global knowledge distilled and analysed

Follow us on LinkedIn
Featured Story

Submission to the Mandatory Guardrails for AI in High-Risk Settings

Amstelveen welcomes the opportunity to provide feedback on the proposed Mandatory Guardrails for AI in High-risk Settings.

In this submission, we have responded to a subset of the questions listed in the proposals paper titled “Proposals paper for introducing mandatory guardrails for AI in high-risk settings”.

Read the article

A culture of integrity

Who we are

Lead the way

Challenging society to do the right thing

Honesty, always

We stand up for what we believe in, no matter what

Grow together

Our success is measured through the growth of others

Make work fun

Excellence can only be achieved by doing what we love

“Amstelveen were flexible in adapting to the unexpected changes to our needs, which was immensely appreciated.”

Senior Risk Director | Telecommunications