Insights

Facial Recognition

How it works, concerns with its application and privacy tips

What is your cyber security risk appetite?

How to quantify and monitor your appetite with 6 key indicators.

Submission to APRA Consultation Draft Prudential Standard CPS 230 Operational Risk

Amstelveen welcomes the opportunity to provide feedback on APRA’s Draft Prudential Standard CPS 230 Operational Risk.

In this submission we have identified five observations which we believe are worthy of consideration.

Submission to Treasury Review of Your Future, Your Super Measures

Amstelveen welcomes the opportunity to provide input into Treasury’s review of the Your Future, Your Super (YFYS) measures.

In this submission we have identified three observations which we believe are worthy of consideration as part of this review.

Why poor risk literacy will harm organisations

Too often risk management training is limited to those team members who are employed to perform roles within dedicated risk teams, such as risk managers, compliance and auditors. As the focus of operational team members is often directed to bite size reminders to raise awareness of what to be on the look out for in […]

Can your organisation effectively manage a critical supplier incident?

What if your organisation was faced with a critical supplier incident? Often organisations spend significant effort in sourcing and assessing whether a supplier is the right fit in terms of service delivery. The risk assessment at this point can include aspects such as information security, financial health, reputation, people management and service delivery. Once onboarding […]

Can Risk & Compliance be more Agile?

If your organisation has or is going through an agile transformation, you might be asking yourself how to adapt. Agile methods tend to favour system development projects so you might be asking yourself what relevance it has to you as a risk and compliance practitioner. Or perhaps you might be looking for how to improve the effectiveness of your risk and compliance function.

Can you automate controls testing and still provide independent assurance?

This article is a part of Risk Update 4. Developments in artificial intelligence, machine learning and robotics have demonstrated that many activities thought to be too complex to be automated, can now be outsourced to a ‘digital’ workforce. What is Controls Testing? Controls are activities and processes that organisations put in place to help manage […]

The shift from manual to automated controls

This article is a part of Risk Update 4. Organisations are up against constant changes in technology, compliance and regulation, and yet internal control functions remain static. Implementing automation into internal control functions can assist in improving efficiency, reducing costs, and result in development of more robust controls. Introduction In a world where organisations are […]

The 5 trends and 5 themes to consider in your IT control assurance planning

This article is a part of Risk Update 4. As we enter a new financial year, it is a good time to take stock of the key technology trends relevant for many organisations and aligning your IT control assurance plans around these trends. Setting context: 5 current technology trends 1. IT services are being delivered […]

Amstelveen Risk Update: Edition 4, July 2021

Welcome to the fourth edition of our Risk periodical, the Amstelveen Risk Update. In this edition, our team has provided a series of perspectives on the themes of Controls and Control Automation. The 5 trends and 5 themes to consider in your IT control assurance planning Effective assurance starts with well informed planning, and emerging […]

White Paper – Model Assurance

Maintaining trust in machine-based decision making.

4 practices to enable a cyber ready return to the office

Center for Internet Security Control 3: Continuous Vulnerability Management Connecting to random and potentially unsecured networks (Wi-Fi or wired) instead of the corporate network/VPN may mean that devices are not receiving prompters to patch and remediate vulnerabilities on their machines. If unresolved, these infected machines may infect other connected devices when finally connected to the […]

Measuring Risk Culture

In our article ‘Clarifying Risk Culture’, we described our framework for considering Risk Culture and the basic requirements for measuring it. In this article, we examine the critical success factors for successfully executing a Risk Culture Assessment, and we provide guidance on interpreting results and driving uplift actions. Critical Success Factors Risk Culture Assessments are […]