Insights

Submission to the Mandatory Guardrails for AI in High-Risk Settings

Amstelveen welcomes the opportunity to provide feedback on the proposed Mandatory Guardrails for AI in High-risk Settings.
Amstelveen is a specialist risk and compliance consultancy which operates across Australia and New Zealand. Our clients include public and private sector organisations at the forefront of AI deployment and which generally have a high degree of exposure to technology and data-related risks, such as those in financial services, government, telecommunications and energy.
In this submission, we have responded to a subset of the questions listed in the proposals paper titled “Proposals paper for introducing mandatory guardrails for AI in high-risk settings”.

Reflections on the first Board Approved Annual Report under the SOCI Act

Boards of critical infrastructure assets face heightened expectations to ensure a robust risk management framework is in place to understand and mitigate operational risks, ensuring compliance with transformative Security of Critical Infrastructure Act 2018 (Cth) (SOCI Act) reforms. As the due date for the first board-approved annual report required under the Act fast approaches; this […]

A Turning Point for Superannuation Risk and Compliance

APRA’s imposition of additional licence conditions on United Super Pty Ltd and BUSS (Queensland) Pty Ltd. echo past catalysts that transformed Australia’s Financial Services governance, signaling regulatory changes ahead. Introduction Three moments have been pivotal for the uplift of risk and compliance practices in the Australian Financial Services Industry. Implications This followed widespread media coverage […]

Key Compliance and Regulatory Themes for 2025

Introduction The risk themes of global turmoil, organisational resilience, climate change and data privacy have shaped the Australian regulatory environment during the last two years. With continued media focus on customer data breaches, service outages, conflicts and severe weather events over the past 12 months, these will likely continue to be a focus in the […]

Introduction to ASRS

Watch the video below: With the recent release of the Australian Sustainability Reporting Standards (ASRS), the Australian ESG regulatory landscape is poised to evolve further in complexity and breadth throughout FY25 and beyond. Our team discusses the implications of mandatory climate-related financial disclosures across industries. Contact us for guidance and support on addressing your sustainability […]

Privacy Considerations for a Small and Medium-Sized Enterprise (SME)

For SMEs, understanding and implementing privacy measures can seem daunting. However, it’s essential for your business’s reputation, customer trust, and regulatory compliance. Here are some practical steps to get started: Identification Personal information includes a broad range of data that can identify someone. Understanding what data is accessible is key to managing it well and […]

Managing your compliance and regulatory requirements

Watch the video below: Regulatory compliance is a key issue for Australian businesses. It’s important for them to meet these requirements in order to build trust with their key stakeholders including customers, shareholders & regulators. Key compliance focus areas that we’re seeing at the moment include: We’re helping clients across these areas in a variety […]

What Australia and its Six Cyber Shields must get right

We have been anticipating the 2023-2030 Australian Cyber Security Strategy since its development was first announced late 2022 by the Hon. Clare O’Neil MP, Minister for Home Affairs and Minister for Cyber Security. The topic has since evolved through a discussion paper, inviting industry experts and organisations to respond, before its final release expected at the end of 2023. The July appointment of Air Marshal Darren Goldie as Australia’s national cyber security coordinator was also welcomed with high expectations, as it revealed a systematic and operational shift in how Australia will respond to cyber incidents. To round it all up, and as the topic of this article, the Minister recently presented at the 2023 AFR Cyber Summit (18th September 2023), revealing the first plans for how the cyber strategy will be executed, motivated by a heightened push for a government-led and coordinated capability, in the wake of Australia’s recent cyber-attacks. These developments come at a time where the national cyber threat grows exponentially year on year, in-line with the rapid evolution of smart technologies and the increasing number of internet-connected devices circulating personal data.

How AI will transform the Risk and Compliance industry

The emergence of Artificial Intelligence (AI) has allowed for sweeping benefits to various industries, while simultaneously sparking debate around its usage, implementation, and regulation.

APRA CPS 230 Compliance Gap Analysis

Amstelveen has developed a compliance gap analysis to help clients comply with APRA’s CPS 230 requirements.

Submission to the 2023-2030 Australian Cyber Security Strategy

Amstelveen welcomes the opportunity to provide feedback on the 2023-2030 Australian Cyber Security Strategy.

In this submission, we have responded to a subset of the questions listed under Attachment A of the discussion paper (titled ‘2023-2030 Australian Cyber Security Strategy’).

A 2023 outlook on regulator focus in Australia

APRA The Australian Prudential Regulatory Authority (APRA) will be continuing its twin themes of “protecting the community today” and ensuring the Australian financial system is “prepared for tomorrow” which are both accentuated in its Corporate Plan for the 2022-23 year. APRA have highlighted the significant shift in economic outlook due to various global factors such […]

Personal Security, Part 2: Practical Tips for Staying Secure in a Connected World

In light of recent high-profile data breaches, more of us are becoming aware of the risks of living in a digital, connected world. While we might be more aware of the risks at this moment, they didn’t just appear; we’ve been living with things like data breaches, identity theft and scams for years.

Has International Law done enough to govern cyberspace?

As Australia and other nation-states ramp up efforts to uplift their resiliency against global cyber-attacks, the question to be asked is whether the current mechanisms, frameworks and effective law that make up International Relations are sufficient in governing cyberspace.