SERVICES

Explore Our Services

Ceda GRC combines governance, risk and compliance expertise with a practical, commercial approach.

Couple this with our legal expertise, and we help Boards and leaders navigate dynamic environments, anticipate risk, identify opportunities and improve processes and experiences.

Two men in suits walking on a city sidewalk, surrounded by office buildings and pedestrians.

We bring fresh eyes, independent perspective and energy to complex challenges. We question the status quo, look for better ways forward and never apply a one size fits all solution.

Our focus is not compliance for compliance's sake. It is about helping organisations meet their obligations, protect their clients and reputation, reduce avoidable risk and make sound commercial decisions.

Whether change is driven by strategy, regulation, systems, structure, people or process, we turn complexity into practical solutions that work for your business, your people and your clients.

What We Do

Select a service to read more.

  • We support regulated businesses to obtain and maintain the licences and authorisations that allow them to operate. This includes taking new entrants through the RADI pathway, supporting ADIs to implement new prudential standards (e.g. CPS 230, CPS 510), and completing AFSL and ACL applications. Across the regulatory spectrum, we also manage regulator engagement and help businesses document the obligations that shape how they operate.

  • Our governance work covers the structure, accountability and oversight that hold a business together, including charter design, committee and reporting structures, accountability mapping, delegations of authority, conflict management, and director and officer obligations. We also support Board and Committee Secretariat needs and the practices that hold governance together as a business grows or changes.

  • Cyber, privacy and information security now sit among the most material risks a business carries. We support clients across Privacy Act and Notifiable Data Breach advice, impact assessments and cyber and information security frameworks. We also provide technology assurance, security advisory and coordinated incident responses.

  • We support responses to regulatory inquiries, Enforceable Undertakings, remediation programmes, and conduct and governance investigations across the full risk spectrum. Our experience is based on having successfully managed these deliverables within regulated businesses, not just advising on them.

  • We help regulated businesses build and run the risk and compliance disciplines that keep them operating. This includes designing risk and compliance frameworks, setting risk appetites, embedding controls and running monitoring programmes and attestations. We also support breach and incident identification, and assess the impact of emerging regulatory change on the business.

  • We independently test and assure Board strategy, risks, issues and business deliverables, giving Boards and Regulators a basis they can rely on. The outcome is either a remediation and uplift plan, or independent confirmation of completeness, accuracy and currency. The same work supports targeted examinations, regulatory interventions and matters where a Board needs independent comfort or sign off.

  • The strength of a Board sits in its people as much as its structure. We work with Directors and Executives through capability and performance reviews, risk culture and ethics assessments and training, and as a trusted independent voice when Boards need specialist review or advice on sensitive matters.

  • We provide practical training on regulatory and legislative change, including FAR and Responsible Manager/Officer requirements. We work with Boards, Executives and teams, with training delivered in person or online. We also lead complex regulatory, strategic and business projects from feasibility to delivery. Our strength is clear communication, practical experience and working confidently in high-risk, regulated environments.

  • Our legal work focuses on the matters that arise from running a regulated business, interpreting the obligations that apply and connecting that interpretation to the operational controls and impact assessments needed to meet them. Engagements range from advice on a specific matter through to an ongoing outsourced General Counsel capability, with experienced litigation and commercial partners drawn in when needed.