Insights

Has International Law done enough to govern cyberspace?

As Australia and other nation-states ramp up efforts to uplift their resiliency against global cyber-attacks, the question to be asked is whether the current mechanisms, frameworks and effective law that make up International Relations are sufficient in governing cyberspace.

Spotting a Scam: 3 red flags to look out for

Do it now! Are you feeling the pressure to act quickly to avoid some sort of consequence? Don’t react emotionally, take a breather and recognise urgency cues indicating a scam. An example of a red flag is “You have an overdue toll bill. Please pay within 3 days or we will issue an additional fine.” […]

Superannuation – APRA’s new target

With continued public interest in the role of Superannuation, proactive and forceful regulatory activity will persist in driving broader uplifts in governance, risk and compliance practices across the industry, and further consolidation of funds.

Amstelveen Risk Update: Edition 5, October 2022

This edition has been dedicated to the theme of Cybersecurity, in participation of Cyber Security Awareness Month 2022.

A How-to: Increasing the rate of success of a Social Engineering attack

The role of human cognition and effect of functional weakness for cyber security.

Facial Recognition

How it works, concerns with its application and privacy tips

What is your cyber security risk appetite?

How to quantify and monitor your appetite with 6 key indicators.

Submission to APRA Consultation Draft Prudential Standard CPS 230 Operational Risk

Amstelveen welcomes the opportunity to provide feedback on APRA’s Draft Prudential Standard CPS 230 Operational Risk.

In this submission we have identified five observations which we believe are worthy of consideration.

Submission to Treasury Review of Your Future, Your Super Measures

Amstelveen welcomes the opportunity to provide input into Treasury’s review of the Your Future, Your Super (YFYS) measures.

In this submission we have identified three observations which we believe are worthy of consideration as part of this review.

Why poor risk literacy will harm organisations

Too often risk management training is limited to those team members who are employed to perform roles within dedicated risk teams, such as risk managers, compliance and auditors. As the focus of operational team members is often directed to bite size reminders to raise awareness of what to be on the look out for in […]

Can your organisation effectively manage a critical supplier incident?

What if your organisation was faced with a critical supplier incident? Often organisations spend significant effort in sourcing and assessing whether a supplier is the right fit in terms of service delivery. The risk assessment at this point can include aspects such as information security, financial health, reputation, people management and service delivery. Once onboarding […]

Can Risk & Compliance be more Agile?

If your organisation has or is going through an agile transformation, you might be asking yourself how to adapt. Agile methods tend to favour system development projects so you might be asking yourself what relevance it has to you as a risk and compliance practitioner. Or perhaps you might be looking for how to improve the effectiveness of your risk and compliance function.

Can you automate controls testing and still provide independent assurance?

This article is a part of Risk Update 4. Developments in artificial intelligence, machine learning and robotics have demonstrated that many activities thought to be too complex to be automated, can now be outsourced to a ‘digital’ workforce. What is Controls Testing? Controls are activities and processes that organisations put in place to help manage […]

The shift from manual to automated controls

This article is a part of Risk Update 4. Organisations are up against constant changes in technology, compliance and regulation, and yet internal control functions remain static. Implementing automation into internal control functions can assist in improving efficiency, reducing costs, and result in development of more robust controls. Introduction In a world where organisations are […]