For licensees & APRA regulated entities

Ex-regulator judgement, on call when it matters.

For AFSL holders, RSE licensees, insurers and fintechs without a full-time regulatory specialist: independent advice from a former ASIC leader on breach reporting, regulator notices and supervisory engagement, and scoped risk and compliance projects on retainer.

Former ASIC leaderSenior role at the national conduct regulator
AI governanceLed ASIC’s cross-sector review
20+ yearsAcross super, wealth, advice and real estate

Regulated firms with real obligations and a thin compliance team.

AFSL & ACL holders

Advice licensees and other licence holders whose compliance function is one or two people.

Super funds & insurers

RSE licensees and insurers that want senior challenge without adding permanent headcount.

Fintechs & platforms

Payments, wealth and investment platforms holding a licence, or applying for one.

Local arms of foreign firms

Australian entities that need someone fluent in how ASIC, APRA and AUSTRAC actually supervise.

Firms with a stretched team

Senior capacity for a defined piece of work, without a permanent hire.

Firms after regulator contact

A notice, a surveillance or a breach has landed and you want a steady second opinion.

Large institutions have in-house specialists and panel law firms. We’re built for the firms that have neither, and need senior judgement without a senior-hire cost.

Two ways to work with us.

Use them on their own, or start with one and add the other. Scope and fees are agreed up front, in writing.

Retainer  ·  On call

Regulator Ready

An ex-regulator on call. Fast, senior access to someone who has sat on the supervisor’s side of the table, so the decisions that matter get a second opinion before they’re made.

What you can use it for

  • A second opinion on whether a matter is a reportable situation, and how to frame the report before it’s lodged
  • Review and challenge of responses to ASIC, APRA or AUSTRAC notices and information requests
  • Preparation for supervisory meetings and surveillances: what is likely to be probed, and what evidence lands
  • “Regulator’s-eye” reviews of a thematic area (complaints, DDO, scams, AI use) before the regulator looks
  • Board and executive briefings on published regulatory priorities and what they mean for your firm

Access retainer: a small monthly fee for guaranteed, fast-turnaround access.

Standing retainer: adds a regular monthly call and document review.

Fixed-fee projects: notice responses and pre-surveillance reviews, quoted up front.

Scoped projects  ·  Retainer

Risk & Compliance Advisory Projects

Defined pieces of risk and compliance work, delivered the way a specialist consultancy would: a clear scope, agreed deliverables and a fixed fee, or a block of work on retainer that you draw down as needed.

Typical projects

  • Risk and compliance framework uplifts: risk appetite, registers and policies
  • Reviews of incident, breach and complaints processes, and remediation support
  • Board and committee reporting: design, review and uplift
  • Independent reviews and gap analyses (CPS 230, DDO, financial crime obligations)
  • Readiness for licence applications, audits and regulatory change

Scoped projects: agreed deliverables, timeline and fee up front.

Project retainer: a block of agreed work, drawn down over time.

Advisory scope: we don’t hold a licence, responsible-manager or officer appointment unless agreed in writing.

Four situations we’re built for.

“We think we’ve had a breach. Is it reportable?”

We test the facts against the reportable situations framework, challenge the assessment, and help you frame a report that is accurate, timely and defensible. The decision stays with you.

Regulator Ready
“We’ve received a notice from the regulator.”

We review your draft response for completeness, evidence and tone, and tell you plainly what a supervisor will read between the lines before you hit send.

Regulator Ready
“The regulator wants to meet next month.”

We prepare your team: the likely lines of inquiry, the evidence to have ready, and who should say what. Calm preparation beats a scramble.

Regulator Ready
“We have a defined piece of risk work and no spare capacity.”

We agree a clear scope, deliver the work to a fixed fee or from a retainer, and leave your in-house team with something they can run: a stronger framework, process or report.

Advisory projects

You can’t buy this from a template.

Judgement about what supervisors weigh comes from having done the supervising, and from having delivered the response inside the regulated firm on the other side. We’ve done both.

  • Inside ASIC. As a leader at ASIC, led cross-sector reviews directed by Commissioners, including a review of AI governance, and led senior engagements with executives at super funds, banks, insurers and advice licensees.
  • Inside licensees. Senior risk, incident, complaints and remediation roles at large super, wealth and advice businesses, including authoring breach reports and responses to regulator notices.
  • Across the frameworks. ASIC conduct obligations, APRA prudential standards (including CPS 230) and the AML/CTF regime, with AML/CTF program assurance experience and CAMS certification.

How we work

AdvisoryYour firm retains every decision and the accountability that comes with it.
Not legal adviceWe’re not a law firm. Where a legal view is needed we work alongside your lawyers.
Regulator informationWe apply experience of how supervision works. We never use or disclose confidential regulator information, and we don’t say what any regulator is thinking about your firm.
Conflicts & confidentialityChecked, and confidentiality agreed, before any work starts.

From first call to working relationship.

1

Introductory call

A short, free conversation about your firm, your regulators and what you need. No obligation.

2

Scope & agree

We confirm conflicts and confidentiality, then agree a retainer or fixed-fee scope in writing.

3

Start

Access begins quickly. We review how it’s working at regular intervals and adjust.

CPS 230 in plain English.

A short guide to APRA’s operational resilience standard, in force since 1 July 2025: what it requires, where entities are still catching up, and a practical action plan.

  • What the standard actually requires
  • Service provider obligations still landing
  • A practical action plan

We’ll email you the guide and may follow up about compliance. No spam — unsubscribe any time. See our Privacy Policy.

CPS 230
Plain-English Guide
Free Download

Start with a short conversation.

Tell us a little about your firm and what you’re facing. We’ll reply within one business day to arrange a free introductory call.

Response Within 1 business day
Cost Introductory call is free

We’ll use your details to reply to your enquiry. No spam. See our Privacy Policy.