Supplier assurance is the discipline of demonstrating to clients and regulators that the business meets the security, privacy, continuity, and resilience standards they expect from suppliers. Vendor risk management is the inverse — assessing and governing the cloud, SaaS, and outsourced services the business itself depends on. Aievon delivers both through a single integrated practice.

Yes. Enterprise Questionnaire Response is scoped to the document and the deadline, completed alongside the team or on the business's behalf, and delivered with a reusable response library for every conversation that follows.

CPS 230 is APRA's prudential standard on operational risk management, in force from 1 July 2025. It applies to APRA-regulated entities; banks, insurers, superannuation funds; and obligations flow downstream into supplier contracts across the financial services supply chain. SMEs serving APRA-regulated buyers are now being asked for evidence the standard requires. Aievon prepares the supplier-side evidence pack as a reusable deliverable.

Enterprise Questionnaire Response is scoped per document or on a small monthly retainer for high-volume sales pipelines. CPS 230 Supplier Readiness Packs are delivered as a fixed-scope deliverable. Vendor Risk Programme design is scoped to the maturity of the vendor base.

CPS 220 is APRA's prudential standard on risk management, requiring all APRA-regulated entities to have a board-approved Risk Management Framework (RMF), a designated Chief Risk Officer, and clear accountability for risk across the organisation. CPS 220 requires the RMF to address all material risks — financial, operational, compliance, and strategic — and to be integrated into business decision-making, not maintained as a standalone compliance exercise. For risk management programmes, CPS 220 sets the expectation that risk is governed at board level, reported with appropriate aggregation, and embedded into the organisation's operations and culture.