Who this service is for
For Australian and Chinese businesses reviewing cyber risk, and Australian organisations seeking better oversight of their China subsidiaries or technology partners. The engagement starts with your business context and applicable requirements.
Requirements and technical controls
We help organisations implement, maintain and evidence cybersecurity controls aligned with requirements such as:
- ISO 27001
- Essential Eight
- Australian Privacy requirements
- Cybersecurity governance
- Third-Party Risk Management
- Security policies and technical controls
From compliance requirements to working technology controls.
How we approach the work
- Translate agreed compliance requirements into a practical technical control plan.
- Design, configure and implement the selected cybersecurity controls.
- Test, document and maintain evidence of control implementation.
Deliverables we can agree with you
- A summary of risks and control gaps
- A prioritised remediation plan
- Implementation and verification priorities
Exact deliverables, scope, timing and support arrangements are agreed around your environment, requirements and available information.
Frequently asked questions
How do consulting and compliance engineering differ?
Consulting helps identify requirements, risks and priorities. Compliance engineering turns agreed recommendations into technical controls and implementation work.
Can the review cover a China subsidiary?
Yes. NetFrame supports Australian organisations assessing and remediating risks across China subsidiaries and China-based technology partners.