Resource Super Case Study
Industry: Banking and Finance
Facing a critical three-month CPS 234 compliance deadline, Resource Super implemented MyCISO Assess, Culture, and Metrics to achieve a 73% cybersecurity maturity rating validated by independent assessment.
Challenge
Resource Super faced a critical three-month deadline to comply with APRA CPS 234, risking the loss of its primary revenue stream if it failed to meet regulatory requirements.
- No structured view of cybersecurity maturity with minimal visibility across critical control domains
- Third-party risk management was underdeveloped and manual efforts made it difficult to measure security performance
- Three-month regulatory deadline with severe consequences for non-compliance
Solution
Resource Super implemented MyCISO Assess, Culture, and Metrics modules, beginning with a gap analysis to define a prioritised, risk-based roadmap.
- Close alignment with MyCISO and their managed service provider to uplift administrative and technical controls
- Culture module deployed to build security awareness and engagement across all staff
- Prioritised, risk-based roadmap targeting high-impact, low-effort improvements first
Outcome
Resource Super achieved a 73% cybersecurity maturity rating, validated through an independent assessment by CyberGRX, reflecting full compliance with APRA CPS 234.
- 73% cybersecurity maturity rating validated by independent CyberGRX assessment
- Real-time visibility into security posture with automated evidence collection
- Measurable improvements in staff security awareness and engagement through the Culture module
With just three months to meet CPS 234 compliance, we needed more than a tool, we needed a partner. MyCISO gave us immediate clarity, a practical roadmap, and the ability to uplift our entire security posture without overwhelming our team.
Addison Graham, Security Manager, Resource Super