Securing information assets to be resilient against a broad spectrum of threats is a journey many Australian organisations find themselves on. A steady stream of data breach disclosures - and a desire not to join that list - is keeping them motivated to stay the course. For banks and other financial entities, there’s additional motivation in the form of regulation - Australian Prudential Regulation Authority (APRA) Prudential Standard CPS 234 - which aims to ensure their information security capabilities are proportionate to their risks. There’s no one-size-fits-all approach to meeting CPS 234’s requirements. Achieving compliance requires a strategic approach that evolves as the organisation matures its ...