Your cyber risk function run for you as a continuous operation — to complement an over-stretched team, or to run the whole function outright, while ownership stays with your board.
See Energy & Utilities → Financial ServicesContinuous, evidence-led proof of trust across your suppliers, ownership and people — the fourth-party exposure questionnaires can't reach.
See Financial Services → Professional ServicesThe customer due diligence backbone for your AML program — beneficial ownership, FOCI and personnel, resolved to an intelligence standard.
See Professional Services →Energy and utilities operators are among the most heavily obligated and most thinly resourced teams in the country. A decade of tooling promised relief and delivered the opposite: more consoles, more alerts, and the same small team left to turn all of it into a position they can defend. The tool became the job.
RiskOps is the answer that isn't another platform. We run the risk function for you as a continuous operating rhythm — holding the senior judgement, keeping the evidence current, and translating your obligations into a live position you can put in front of a regulator, an insurer, or the board. The risk stays owned where it belongs, with your board and executive; we run the operation behind it and keep the position provable.
Related: the 2027 dates for energy & utilities and Essential Eight readiness.
A concise overview of how BayRisk runs continuous, outcome-based cyber risk management for Energy & Utilities. Enter your work email and it downloads straight away.
As financial-services teams work through CPS 230, almost everyone is mapping their material service providers. Yet the exposure that quietly nags at the firms we work with sits one layer further back: the fourth parties behind those providers — the shared upstream dependency that three of your critical suppliers rely on without any of them mentioning it, because no questionnaire was ever built to reveal what its own author cannot see.
RiskOps: ETM closes that gap. Built inside Australia's defence and national-security world, it brings intelligence tradecraft to the enterprise — continuous, evidence-led proof across supply chain, ownership and control, and personnel, independently validated rather than self-attested. A live position, not a point-in-time attestation.
Related: the 2027 dates for financial services.
A concise overview of RiskOps: ETM's continuous, evidence-led approach to enterprise trust management for financial services. Enter your work email and it downloads straight away.
Tranche 2 brought law, accounting, conveyancing, real estate, and trust and company service providers inside the AML/CTF regime on 1 July 2026. Enrolment and a written program were the starting line, not the finish. AUSTRAC has said plainly it will scrutinise programs that aren't applied in daily operations, not just whether one exists on paper, and its own conduct this year backs that up.
The hardest part of running the program day to day is the customer due diligence: knowing who you are really dealing with, who ultimately owns and controls them, and whether any of that reaches somewhere it shouldn't. RiskOps: ETM gives your firm that capability directly, resolving beneficial ownership, foreign ownership, control and influence, and personnel exposure to an intelligence standard, so your program stands up to a regulator now looking past the paperwork.
Related: the 2027 dates for professional services.
A concise overview of how RiskOps: ETM gives professional-services firms the customer due diligence backbone their AML/CTF program needs. Enter your work email and it downloads straight away.
Whichever side of the line you sit, the conversation starts the same way — a short, private briefing to pinpoint where your risk actually sits.
Get in touchRiskWatch is our monthly read on Australia's regulatory and cyber-risk clock: what is due, what is coming, and what it means for the teams that carry the obligations. No noise, no sales pitch.