Banking Cyber Security Services Australia
Intrix delivers end-to-end cyber security for Australian banks and financial institutions. Our capabilities span AS/400 core banking security, CORIE-aligned red teaming, SWIFT CSP assessment, payment API testing, and APRA CPS 234 and CPS 230 compliance advisory all delivered by an Australian-based, CREST-certified team.
Defending the Entire Financial Ecosystem
Modern banking is a paradox of innovation and legacy. You are racing to deploy cloud-native mobile apps while your core ledgers run on decades-old mainframes. You face pressure from agile fintech competitors on one side and relentless state-sponsored threat actors on the other.
While APRA compliance is the baseline, true security requires more than a checklist. It requires deep technical defence at every layer of your stack from the legacy code in your core banking system to the APIs powering your open banking interface.
Intrix Cyber Security is your technical partner. We don’t just audit your governance; we harden your infrastructure, simulate your adversaries, and secure your payments
Our Banking Security Capabilities
Core Banking Security (AS/400 & IBM i)
Your AS/400 (IBM i) system handles your most critical transaction data, yet it is often excluded from modern security testing due to a lack of specialised skills. Relying on “security by obscurity” is a dangerous strategy
Mainframe Hardening
We apply modern security principles to your legacy environment, securing system values, user classes, and exit programs to prevent unauthorised privilege escalation
IFS & Open Source Security
As you modernise your IBM i with open-source tools (PHP, Node.js), new vulnerabilities emerge. We secure these modern interfaces against web-based attacks
Audit & Compliance Logging
We configure your system auditing (QAUDJRN) to ensure you capture the forensic evidence required for real-time threat detection and CPS 234 compliance
Intelligence-Led Red Teaming (CORIE)
Standard penetration testing is insufficient for an Authorised Deposit-taking Institution (ADI). You need to know if your defences can withstand a determined, sophisticated human adversary
CORIE Framework Alignment
We run adversary simulations aligned with the CORIE framework, preparing you for APRA-mandated intelligence-led testing
Objective-Based Scenarios
Our Red Team targets real attacker goals such as fraudulent SWIFT transfers or high-value data theft, to reveal your true defensive gaps.
We collaborate with your SOC to fine-tune detections and boost response to advanced attacker techniques
Payment & Transaction Security
We secure the critical channels where money leaves your institution, preventing fraud and disruption
SWIFT CSP Assessment
Independent assessment and guidance to ensure your environment meets SWIFT CSP’s strict security controls
We manually test your payment gateways and CDR APIs to uncover logic flaws and data leaks
Fraud Scenario Modeling
We analyse your transaction flows to identify logic gaps that criminals could exploit to bypass fraud controls or launder money
Regulatory Assurance (CPS 234 & CPS 230)
We translate complex regulatory obligations into a sustainable, risk-based security strategy
CPS 234 (Information Security)
We move you beyond tick-box compliance by implementing systematic control testing and strong TPRM frameworks that meet APRA’s evidence requirements
CPS 230 (Operational Resilience)
We align cyber response with business continuity so your critical operations can withstand a major cyber shock
Board Advisory
We bridge the gap between the server room and the boardroom, giving Directors clear, jargon-free insights to meet their accountability obligations
Why Financial Institutions Choose Intrix
Legacy & Modern Fluency
We’re one of the few providers skilled in securing both legacy mainframes and modern Kubernetes
Sovereign & Secure
Our team is Australian-based and security-cleared, ensuring your sensitive data never leaves our shores
Evidence-Based Reporting
Our reports serve dual audiences
technical detail for engineers, and clear executive summaries for Board
Frequently Asked Questions
What banking cyber security services does Intrix provide?
Intrix provides a full suite of banking cyber security services for Australian financial institutions, including AS/400 and IBM i security assessments, CORIE-aligned intelligence-led red teaming, SWIFT CSP assessments, payment gateway and API security testing, and APRA CPS 234 and CPS 230 compliance advisory. All services are delivered by an Australian-based, CREST certified team.
What is CORIE testing and which banks need it?
CORIE is the Council of Financial Regulators intelligence-led cyber evaluation framework designed specifically for Australian financial institutions. APRA expects Authorised Deposit-taking Institutions to conduct CORIE-aligned adversary simulations that test real attacker objectives rather than standard vulnerability lists. Intrix runs CORIE-aligned red team engagements that target realistic goals such as fraudulent SWIFT transfers and high-value data exfiltration to expose genuine defensive gaps.
What is a SWIFT CSP assessment?
A SWIFT CSP assessment is an independent review of your environment against the SWIFT Customer Security Programme mandatory and advisory controls. Financial institutions using SWIFT infrastructure are required to attest to their compliance annually. Intrix assesses your SWIFT environment, identifies control gaps, and provides remediation guidance to support your attestation obligations.
How does Intrix secure AS/400 and IBM i core banking systems?
Intrix conducts a full security review of your IBM i environment covering system values, user profiles, object authorities, network access controls and audit journal configuration. We then provide hands-on hardening guidance and access control remediation without disrupting live operations. This directly addresses the CPS 234 requirement to include all critical information assets in your security programme, including legacy platforms.
Does Intrix work with APRA-regulated entities?
Yes. Intrix works with Australian banks, credit unions, superannuation funds and other APRA-regulated entities to build and maintain compliance programmes under CPS 234 and CPS 230. Our advisory covers systematic control testing, third-party risk management frameworks, board-level reporting and operational resilience alignment.
Ready to Strengthen Your Security Posture?
Don’t wait for an incident. Our experts assess your security posture and build a protection strategy tailored to your needs