Cyber Resilience

Information security has challenged organisations since the very beginning. With increased dependency on digital services, cyber resilience is no longer a nice to have - it is essential.

“We shouldn’t ask our customers to make a tradeoff between privacy and security.
We need to offer them the best of both. Ultimately, protecting someone else’s data protects all of us”
- Tim Cook

Cyber Assure

From a complementary 30-minute screening of your choice to comprehensive independent assurance audits. We provide outcomes giving both you and external entities the confidence needed to map and improve your cyber resilience.

Cyber Foundation

Cyber resilience requires a foundation that encourages consistency and collaboration. By assessing your enterprise risk management framework, we create or improve your information security framework to mitigate risk.

Cyber Uplift

The culture piece of any information security framework determines its success. Through cyber risk awareness training, tabletop exercises, cultural surveys, and control testing, we enhance knowledge while identifying areas of improvement.

Technology itself is constantly changing. Organisations need to maintain ongoing monitoring of their cyber risk framework to proactively mitigate blind spots and adapt to the exponential rise of AI-enabled cyber attacks. Standards and regulations are now being issued and updated at unprecedented speed, offering essential guidance to counter these threats.

Our Approach

For Cyber Risk Management, our approach and methodology covers the better practice guidelines and standards relevant to the organisation including:

We also have extensive industry specific compliance experience relating to information security and risk management. For Australian Prudential Regulation Authority (APRA) regulated financial institutions, we ensure compliance with the designated risk management Prudential Standards and Guidelines:

  • CPS 234 Information Security
  • CPG 234 Information Security
  • CPS 230 Operation Risk Management
  • CPG 235 Managing Data Risks

Cyber Risk Management Insights

New Third Party Requirements Reshaping Australia

On September 15th 2025, the Institute of Internal Auditors (IIA) issued the new Topical Requirements focused on strengthening consistency and quality of auditing the high-risk area of Third Party Management. As a new mandatory element of the IIA International Professional

Read More »
AI Governance

The AI Governance Maze: Navigating AI Risks and Chaos

Five years ago (mid-2020), the AI landscape was primarily dominated by “Narrow AI” models performing specific tasks like image classification, recommendation systems, and basic natural language processing. While foundational large language models like GPT-3 were being introduced (GPT-3 was released

Read More »
Ai governance

Essential AI Governance Documents to Build Trust in AI

As artificial intelligence (AI) becomes embedded in the operations of many organisations, effectively managing the associated risks is essential. Successful AI governance relies on a robust foundation of policies, plans, and documentation that address technical, operational, legal, and ethical dimensions.

Read More »

Meet the Team

William Makdessi

The Cyber Risk Lead at InConsult, William has over 15 years of experience in Information Technology working both frontline defence and proactively assisting organisations across Government, Insurance, Public Health, Construction and Automotive.

Skills:

  • Cyber Risk Awareness Training, Phishing Campaigns and Tabletop Exercises
  • Essential Eight and Local Government Guidelines Audit
  • ISO 27001 Implementation and Audit
  • ISACA-certified NIST Cyber Security Framework Auditor
Andy Chu

Andy Chu

The Risk Technology Lead at InConsult, Andy has over 13 years of experience across financial services, telecommunications, technology and design. Andy brings with him Big 4 consultancy expertise and the ownership of nationwide initiatives for NBN Co.

Skills:

  • Technology Strategy and Design management
  • Technology Innovation
  • Regulatory and Compliance Management and Reporting
  • Chartered Accountant (CAANZ)

Waresa Saiara

An Internal Auditor at InConsult, Waresa is highly analytical auditor with extensive experience in financial and information security audit, leveraging technology such as Power BI to better represent audit data. Waresa pushes the needle on innovative ways to better communicate findings.

Skills:
  • Financial Audit
  • Risk Control Audit and Assurance
  • Information Security Audit
  • Chartered Accountant (CAANZ)
 

Would you like to know more about our Cyber Resilience services and capabilities?