Ann: Appendix 4C - Quarterly Activity Report, page-22

ACU's ISO 27001 and IRAP accreditations are as good as you can get. My sense is some investors still view ACU through a pre Feb 2019 view and harbour fears about it's resilience. Reality is the business is light years ahead now and likely ahead of many in the industry given the spotlight shining directly their way. By Oct 2019 they'd attained ISO 27001 which is difficult to achieve and matches Big 4 bank expectations. IRAP is directly linked to the Aus Govts Signalling Directorate and takes expectations on security from there.