Financial Services

AWS User Guide to Financial Services Regulations & Guidelines in Australia July 2020

• Cover
• Overview
• Security and Shared Responsibility
• Security in the Cloud
• Security of the Cloud
• AWS Compliance Assurance Programs
• AWS Artifact
• AWS Regions
• CPS 231 "Outsourcing"
• Outsourcing Policy
• Assessment of Outsourcing Options
• Outsourcing Agreement
• Notification Requirement
• CPS 234 "Information Security"
• Roles and Responsibilities
• Information Security Capability
• Policy Framework
• Information Asset Identification and Classification
• Implementation of Controls
• Incident Management
• Testing Control Effectiveness
• Internal Audit
• APRA Notification
• CPG 234 Management of Security Risk in Information and Information Technology
• Information Paper on Outsourcing Involving Cloud Computing Services
• Risk management considerations
• APRA notification and consultation
• Next Steps
• Additional Resources
• Document Revisions