CPS 234
Every Inline Code post tagged CPS 234, ordered most recent first.
2 posts
26 min read
eMudhra TLS certificate compromise: browsers are fixed, your estate is not
Eight eMudhra certificate authority keys were so weak anyone could recover them. Chrome and Firefox blocked them in hours. Servers, containers and Java did not.
- Cryptography
- Supply chain
- Third-party risk
7 min read
The APRA CPS 234 audit: what auditors actually look for
Most CPS 234 audit findings are not surprises to the audited entity. They are gaps the entity already knew about and chose to defer. The audit just makes them visible. Here's the structure of the audit and the findings that recur.
- CPS 234
- Audit
- Information security
Get started
Talk to the security lead who would do the work.
A thirty-minute discovery call costs nothing. We confirm fit, scope, and timing, then issue a fixed-fee statement of work within two business days.