Australian Cyber Essentials (ACE),
certified by Bureau Veritas
A new benchmark in supply chain cyber security assurance
Feb. 17 2026
Bureau Veritas has partnered with Cyber Audit Team to launch the Australian Cyber Essentials (ACE), certified by Bureau Veritas, a three-level, evidence based cyber security assurance framework designed to strengthen how enterprises and their suppliers approach third-party cyber security risk.
In today's interconnected business landscape, an organisation's cyber security is no longer defined by its own four walls. A single weakness in a third-party provider can lead to financial loss, reputational damage, and regulatory scrutiny. Boards and executives are increasingly focused on third-party risk oversight, but many supplier assurance approaches sit at unhelpful extremes, questionnaire based self-attestation on one side, and programmes too slow or too costly to scale on the other.
ACE closes this gap by combining a practical framework, evidence submission, guided uplift support, and independent certification.
HOW IT WORKS
- Suppliers complete a plain English assessment aligned to ACE requirements
- Suppliers submit evidence through an online portal to demonstrate controls and mechanisms are in place
- Suppliers receive structured support through 12 guided workshops (12 × 1 hour) delivered by Cyber Audit Team
- Bureau Veritas independently reviews the evidence and issues certification when requirements are met
Why Bureau Veritas and Cyber Audit Team
Cyber Audit Team brings practical cyber security implementation experience and supplier uplift capability. Bureau Veritas brings independent certification authority and trusted conformity assessment capability, issuing certification based on evidence review. Together, this partnership makes cyber security assurance more consistent, scalable, and accessible, while remaining credible for enterprise procurement and risk stakeholders.
Certification is issued by Bureau Veritas based on independent review of submitted evidence against Australian Cyber Essentials (ACE) requirements.
