Your partner in navigating Risk, Compliance, and Technology
Amstelveen is a specialist provider of risk, compliance and technology expertise, operating across a range of business sectors.
The Latest
[Audit and Assurance Internal Audit Focus Areas for 2026 26 Mar 2026
Organisations continue to face heightened regulatory oversight, rapid technological change, and growing expectations around governance, risk management, and operational resilience. Internal Audit plays a critical role in providing assurance that risk and control frameworks are effective and aligned to strategic objectives. The IIA Global Internal Audit Standards (GIAS) raise the bar on risk-based planning, technology […]
Read the article](https://amstelveen.com/insights/internal-audit-focus-areas-for-2026/)
[Audit and Assurance Strengthening CPS 230 Resilience Through Internal Audit 2 Feb 2026
Since 1 July 2025, APRA’s Prudential Standard CPS 230 Operational Risk Management has been fully enforceable. The standard now shifts the focus from readiness to demonstrating resilience, requiring entities to prove that operational risk frameworks, business continuity plans and service provider arrangements operate effectively in practice. Under CPS 230, Internal Audit has two mandated responsibilities: […]
Read the article](https://amstelveen.com/insights/strengthening-cps-230-resilience-through-internal-audit/)
[Business Risk and Resilience Six Months of CPS 230: What does the next phase of resilience look like? 15 Dec 2025
As APRA sharpens its focus on operational risk and organisations continuously embed regulatory requirements, the evolving business continuity landscape has exposed key areas where organisations can evolve to build true operational resilience. CPS 230 Embedment Retrospective It has now been six months since the Australian Prudential Regulatory Authority (APRA) has enforced Prudential Standard (CPS) 230 […]
Read the article](https://amstelveen.com/insights/six-months-of-cps-230-what-does-the-next-phase-of-resilience-look-like/)
[Business Risk and Resilience Building Confidence in Vendor Business Continuity 24 Sep 2025
As organisations become more reliant on third-party providers, the risk to operational continuity grows. Validating vendor Business Continuity Management (BCM) capabilities should be standard practice, not just for regulatory compliance, but to protect operations, ensure resilience across the value chain, and maintain stakeholder trust. APRA’s CPS 230 Prudential Standard on Operational Risk Management sets a […]
Read the article](https://amstelveen.com/insights/building-confidence-in-vendor-business-continuity/)
[Business Risk and Resilience Submission to the Guiding Principles to Embed Zero Trust Culture 25 Mar 2025
Amstelveen welcomes the opportunity to provide feedback on the proposed guiding principles to embed a Zero Trust Culture across the whole of Government.
Amstelveen is a specialist risk, technology and compliance consultancy which operates across Australia and New Zealand. Our clients include public and private sector organisations which generally have a high degree of exposure to technology and cyber-related risks, such as those in government, financial services, telecommunications and energy.
In this submission, we have responded to a subset of the questions listed in the consultation paper titled “Guiding Principles to embed Zero Trust Culture”. Our response follows the review of the Zero Trust Culture principles listed in the consultation paper, and the Protective Security Policy Framework (PSPF) release in 2024.
Read the article](https://amstelveen.com/insights/submission-to-the-guiding-principles-to-embed-zero-trust-culture/)
Our Services
Amstelveen equips organisations to identify, assess, and mitigate their most significant risks. Our risk, compliance, and technology professionals support clients to make risk informed, strategic choices that improve the governance of their organisations.
Featured story Internal Audit Focus Areas for 2026
Organisations continue to face heightened regulatory oversight, rapid technological change, and growing expectations around governance, risk management, and operational resilience. Internal Audit plays a critical role in providing assurance that risk and control frameworks are effective and aligned to strategic objectives. The IIA Global Internal Audit Standards (GIAS) raise the bar on risk-based planning, technology […]
Read the article](https://amstelveen.com/insights/internal-audit-focus-areas-for-2026/)
Featured story Six Months of CPS 230: What does the next phase of resilience look like?
As APRA sharpens its focus on operational risk and organisations continuously embed regulatory requirements, the evolving business continuity landscape has exposed key areas where organisations can evolve to build true operational resilience. CPS 230 Embedment Retrospective It has now been six months since the Australian Prudential Regulatory Authority (APRA) has enforced Prudential Standard (CPS) 230 […]
Read the article](https://amstelveen.com/insights/six-months-of-cps-230-what-does-the-next-phase-of-resilience-look-like/)
A culture of integrity
Lead the way
Challenging society to do the right thing
Honesty, always
We stand up for what we believe in, no matter what
Grow together
Our success is measured through the growth of others
Make work fun
Excellence can only be achieved by doing what we love
“Amstelveen were flexible in adapting to the unexpected changes to our needs, which was immensely appreciated.”
Senior Risk Director | Telecommunications