Sahil Dubey
Essential Eight · APRA CPS 234 · IRAP · Australia

Essential Eight & APRA CPS 234 uplift for Australian teams on AWS.

Move up the ACSC Essential Eight maturity levels, meet APRA CPS 234, and get IRAP/ISO 27001-ready — with the controls actually implemented in your AWS account and the evidence automated. CISA + AWS Solutions Architect Professional, 16+ years.

Book a free 30-min callEmail me

What you get

Essential Eight uplift

  • Maturity assessment (levels 0–3) across all eight strategies
  • Patch & application control, MFA, restrict admin, macro/hardening
  • Regular, tested backups with restore verification on AWS

APRA CPS 234

  • Information-security capability mapped to CPS 234 obligations
  • Control testing program + incident response & notification
  • Board-ready reporting and independent-review readiness

IRAP / ISO 27001

  • Environment prepared for IRAP assessment
  • ISO 27001 Annex A control mapping — one set, many frameworks
  • ISMS evidence automation via AWS Config

Built on AWS, secure by default

  • Multi-AZ VPC, IAM least-privilege, KMS everywhere
  • CloudTrail + GuardDuty + Security Hub wired to response
  • Terraform + CI/CD so controls stay enforced, not drifting

Proof

4×consecutive audits passed, zero major findings
APACNZ banking delivery (BNZ, KiwiBank, ANZ, Westpac)
16+years in production AWS
Essential EightAPRA CPS 234IRAPISO 27001AWS ConfigTerraformCloudTrailKMSBackups/DR

FAQ

What is the Essential Eight?

The ACSC baseline of eight mitigation strategies measured across maturity levels 0–3. I uplift each on AWS and produce the evidence.

Do you cover APRA CPS 234?

Yes — information-security capability, control testing and incident response mapped to CPS 234, with board-ready reporting.

IRAP or ISO 27001 too?

Yes. Essential Eight and ISO 27001 overlap heavily, and I prepare environments for IRAP assessment — one AWS control set serving multiple frameworks.

Are you based in Australia?

Remote-first across Australian time zones, with hands-on APAC and NZ banking delivery.

Lift your security posture — with evidence.

Free 30-minute call — tell me your target maturity and timeline.

Book a callAWS DevOps services →