The Australian Prudential Regulatory Authority (APRA) has updated its risk management requirements and mitigation techniques, making it faster and easier to get to cloud. Financial services institutions (FSIs) across Australia can help ensure their AWS implementation addresses key control guidelines by using Accenture Security Framework for AWS.

1. SECURITY
FRAMEWORK
FOR AWSAUSTRALIAN PRUDENTIAL
REGULATORY AUTHORITY
(APRA) GUIDELINES
ACCENTURE

2. Copyright © 2017 Accenture. All rights reserved.
TIME TO GET INTO
THE CLOUD
2
By moving to cloud, Australian FSIs can benefit through :
• Enhanced operations
• Service efficiency
• Cloud services’ scalable, standardized, secure infrastructure
Australian Prudential Regulatory Authority (APRA) has updated
risk management requirements and mitigation techniques.
See: “Outsourcing Involving Shared Computing Services (Including Cloud)”

3. Copyright © 2017 Accenture. All rights reserved. 3
ACCENTURE SECURITY FRAMEWORK FOR AWS
makes it easier for FSIs in Australia to:
• Adopt AWS services and use them as described
within the APRA guidelines.
• Secure both sensitive and non-sensitive workloads
on the AWS platform.
FAST-TRACK
THE MOVE

4. Copyright © 2017 Accenture. All rights reserved. 4
Layered approach to security as required by particular workload:
Network flow controls
Data protection and
access management
Auditing and configuration
management
THREE LAYERS OF
CLOUD SECURITY
Accenture Security Framework for AWS

5. Copyright © 2017 Accenture. All rights reserved. 5
CORE PRINCIPLES
OF FRAMEWORK
• Guides the creation of an AWS cloud-based environment for
material workloads that follows traditional IT security models
• Leverages agile development methodologies and continuous
integration for new approach to security in cloud
Accenture Security Framework for AWS

6. Copyright © 2017 Accenture. All rights reserved. 6
INNOVATIVE SECURITY
IN CLOUD
• Provide data security by managing “infrastructure as code”
through software development and deployment lifecycle
• New ways to perform resilience, disaster recovery, backups

7. Copyright © 2017 Accenture. All rights reserved. 7
APRA KEY CONTROL
GUIDELINES
View table of APRA key technology controls for Access Control
technology components mapped against:
• Accenture Security Framework for AWS
• AWS services used to address the controls

8. Copyright © 2017 Accenture. All rights reserved. 8
MAXIMISE
COMPLIANCE
Access the report to:
• Take a simplified approach to implementing the
appropriate AWS services and platform
• Address the key controls listed for each of the
technology key control requirements set out by APRA

9. Copyright © 2017 Accenture. All rights reserved. 9
GET STARTED NOW
AUSTRALIAN FSIs
BENEFIT FROM
Secure and resilient AWS
platform
Ability to support all
workloads
Manage data securely Support the adoption of
cloud-native development
and security technique

10. DOWNLOAD
FULL REPORT
https://www.accenture.com/au-en/insight-security-framework-aws.aspx