SeComPass = Security+Compliance+Assurance - SeComPass Industry Blog #CertificationsSeComPass = Security+Compliance+Assurance - SeComPass Industry Blog #Certificationshttps://www.secompass.au/blogs/tag/certificationsThu, 12 Mar 2026 16:12:55 +1100http://zoho.com/sites/<![CDATA[Why It's a Must to have an Assessment of Business CyberSecurity]]>https://www.secompass.au/blogs/post/Why-it-is-a-must-to-have-an-Assessment-of-Business-CyberSecuritySeComPass have created a light-weight framework to do a business CyberSecurity Assessment. Our industry expert consultants can provide focused advice to New Zealand businesses on their top cyber risks.]]>

Why Assess Cybersecurity

Cybersecurity is a hot topic. And we have seen big cybersecurity and privacy gaps in organisations who previously didn't have any compliance obligations. This is especially true for small businesses who hold a lot of confidential/personal/financial information or intellectual property (patents).

 

CyberSecurity for Businesses in NZ vs Australia

Currently in New Zealand, there are no security compliance obligations by authorities. Albeit in Australia, the Federal Government has mandated ISO27001 for any organisation to work with them. This will come down to New Zealand sooner rather than later, so be ready.

In Australia, the last few months have been quite challenging for the businesses where the breaches went to a new high, e.g., Optus and Medibank breaches among others.

In New Zealand also, the breaches have been touching a new high e.g., Mercury IT, Pinnacle Health, Air New Zealand, Reserve Bank of New Zealand, Waikato DHB (now a bit old), New Zealand Stock Exchange.

 

3 Benefits of doing ABC assessment

  • Know your top business cybersecurity risks without breaking the bank.
  • Get an assessment aligned with an international framework  (ISO27001).
  • Make sure you implement some easy ways to reduce the business cybersecurity risks.


SeComPass has been working with organisations in New Zealand, Australia and the US. When talking to small businesses, we felt that they didn't have a lot of money to spend on cybersecurity. So SeComPass has specially created this assessment framework and as a result, ABC Assessment is a unique way to assess the gaps and risks, thus attaining a better level of understanding within days rather than weeks and months and without breaking the bank.

 

Sign-up Process for ABC assessment

  • We intake  only 5 organisations  every 3 months.
  • Once you are offered a place, we do an initial chat to get to know your specific needs as we don't take a cookie-cutter approach.
  • After the initial chat, we complete the ABC Assessment with the top management.
  • After that, we discuss the assessment results including the top 5 ways you can reduce the risks.

 

If you want to know more, you can register your interest by clicking below and know what it could mean to you and your business.

Register your Interest.
]]>Mon, 30 Jan 2023 07:39:00 +1100<![CDATA[Upcoming FMA Regulations regarding CyberSecurity]]>https://www.secompass.au/blogs/post/fma-regulations-regarding-cybersecuritySeComPass have created a light-weight framework to fulfill FMA CyberSecurity requirements. Our consultants can swiftly help New Zealand Financial Advisors fulfil the FMA requirements for cybersecurity and BCP.]]>

Last year FMA (Financial Markets Authority) mandated the new requirements for companies and people looking to get the Financial Advice Provider (FAP) licence. 


  • The target date for Class 1 and Class 2 license applications was 30 September 2022.
  • The target date for Class 3 license applications was 30 June 2022.

Some of the requirements are cybersecurity and business continuity plan (BCP) related and require some technical know-how and understanding of the business as well. In addition to the FAP full license application kit, and other resources available on FMA website, the FMA is developing self-assessment tools to help Class 1 and Class 2 license applicants identify where they might need to do further work to meet the full licencing requirements. A Cyber Security and Business Continuity Planning (BCP) self-assessment tool   had recently been published on the FMA website.


FMA will continue to accept applications for full licences at any time. However, if you’re a transitional licence holder and you want to continue providing financial advice services under your own licence from 17 March 2023, you must apply for a FAP full licence as soon as possible to ensure it is processed by the time your transitional licence expires at the close of 16 March 2023. Note that the turnaround time for processing applications is up to 60 days and FMA are closed for the summer holidays from 20 December 2022 to 9 January 2023 and will not be processing any licence applications during this time.


For these licenses:

  • FMA specifically asks for an approved, documented cyber security policy and the details of its approved, last review and next review.
  • If you don't have this, you need to ensure that you comply with the business continuity and technology systems license condition

 SeComPass have created a light-weight framework to fulfill those requirements. Our consultants can swiftly help you fulfil the FMA requirements for cybersecurity and BCP.
Regulatory compliance
Get compliance faster
Many organisations don't know where to start with for the FMA requirements. If you think, you need a little bit of advice, we can discuss it over phone and swiftly work with you to provide the documents and policies in required format, according to your needs.
Book a No-Obligation Consultation
]]>Mon, 16 May 2022 16:05:35 +1000<![CDATA[Do you need a Certification]]>https://www.secompass.au/blogs/post/do-you-need-a-certificationThis blog post talks about why organisations need certifications and assurance reports. There are 5 main reasons why an organisation needs a security c ]]>

This blog post talks about why organisations need certifications and assurance reports.


There are 5 main reasons why an organisation needs a security certification like ISO27001 or SOC1/SOC2:

        1. My customers are asking me to fill in big questionnaires and all sorts of questions.
        2. The competitors don't have any security certifications and this will be my point of differentiation.
        3. My customers are asking me specifically for security certification like this or they would go to other suppliers- end of story.
        4. I am fed up of proving to the customers that we have top-notch security tools and processes in place.
        5. Some organisations we work with are fully compliance-driven and need security certifications.
        6. We want to ensure that I take due care of information provided by the customers and employees.
  1. The competitors don't have any security certifications and this will be my point of differentiation
  • My customers are asking me specifically for security certification like this or they would go to other suppliers- end of story.
  • I am fed up of proving to the customers that we have top-notch security tools and processes in place.
  • Some organisations we work with are fully compliance-driven and need security certifications.
  • We want to ensure that I take due care of information provided by the customers and employees.
Many organisations don't know what to start with when looking for certification. If you think, you need a little bit of advice, we can discuss it over phone and customise the process. according to your needs 

Book a no-obligation consultation
]]>Mon, 16 May 2022 15:22:50 +1000