Australia
Australian data residency with APRA CPS 234 and Essential Eight monitoring
APRA-regulated entities, Australian Government agencies, and ASX-listed companies face APRA CPS 234, the ACSC Essential Eight, and the Notifiable Data Breaches scheme. ManySignal stores all data in AWS Sydney, provides 72-hour APRA incident notification tracking, and generates Essential Eight evidence.
Australia data residency guarantees
Storage region
AWS AP-SOUTHEAST-2 (Sydney) — all log data, entity graph, case records, and analytics stored in Australia. No transfer outside Australia under default deployment.
Sovereign cloud alignment
Deployment configuration aligned to ASD Cloud Security Guidance. IRAP assessment in progress for PROTECTED classification workloads.
ISM controls
Australian Government Information Security Manual (ISM) controls addressed — event logging (ISM 0580), security monitoring (ISM 0109), and incident management (ISM 0123) evidence provided.
Australian regulatory frameworks supported
APRA CPS 234
Information security for APRA-regulated entities — 72-hour material incident notification, monitoring capability evidence
ACSC Essential Eight
Essential Eight Maturity Model — patching, admin privileges, MFA, application control monitoring evidence
Privacy Act 1988 / NDB Scheme
Notifiable Data Breaches — OAIC notification support, eligible breach determination, as-soon-as-practicable notification
Security of Critical Infrastructure Act (SOCI Act)
CISC cybersecurity obligations for critical infrastructure assets — incident notification to ASD/CISC
ISM (Australian Government)
Information Security Manual — government agency deployment with ISM control evidence
Prudential Standard APS 231
Business Continuity Management — operational resilience monitoring for ADIs and insurers
Breach notification timelines — Australia
72 hours
APRA CPS 234 — Material information security incident notification to APRA
As soon as practicable
Privacy Act / NDB — Eligible data breach notification to OAIC and affected individuals
12 hours
SOCI Act — Serious cyber security incidents affecting critical infrastructure assets notification to ASD
Australia sales and support
Australia sales: [email protected]
Sydney office: Available for on-site Australian Government briefings
Australia deployment — common questions
Where is Australia customer data stored?
Australia customer data is stored and processed in AWS AP-SOUTHEAST-2 (Sydney). No Australia customer data is transferred outside Australia under default deployment. IRAP assessment of the ManySignal platform for PROTECTED workloads is in progress.
How does ManySignal support APRA CPS 234 compliance?
ManySignal addresses APRA CPS 234's requirements for APRA-regulated entities (banks, insurers, superannuation funds) — specifically: information security capability maintenance (paragraph 15), detection of security incidents (paragraph 27), and notification to APRA within 72 hours of a material information security incident (paragraph 36). Evidence packages are formatted for APRA prudential reporting.
Does ManySignal support the ACSC Essential Eight?
Yes. ManySignal maps to the ACSC Essential Eight Maturity Model. The platform provides monitoring evidence for: patching applications (detection of unpatched systems in network logs), restricting administrative privileges (privileged access anomaly detection), multi-factor authentication (MFA bypass and fatigue attack detection), and application control (unauthorised application execution detection). Essential Eight Maturity Level 2 evidence is fully supported.
Does ManySignal support the Australian Privacy Act and Notifiable Data Breaches (NDB) scheme?
Yes. Under the Privacy Act 1988 and the Notifiable Data Breaches scheme, organisations must notify the Office of the Australian Information Commissioner (OAIC) as soon as practicable after becoming aware of an eligible data breach. ManySignal's case management identifies eligible data breaches (unauthorised access or disclosure of personal information likely to result in serious harm), starts the notification timeline, and pre-populates the OAIC notification form.
Does ManySignal have an IRAP assessment?
ManySignal's IRAP (Information Security Registered Assessors Program) assessment for the Australian Government is in progress. In the interim, Australian Government agencies can deploy ManySignal for OFFICIAL and OFFICIAL:Sensitive workloads based on the ASD's Cloud Security Guidance framework. Assessment documentation is available on request for agencies conducting their own cloud security assessment.
Deploy ManySignal in Australia
Speak with our Australia team about APRA CPS 234, Essential Eight monitoring configuration, and NDB notification automation — in one session.