How Arxis delivered bank-grade cyber resilience to Credit Union SA

The uplift program replaced fragmented systems with a single, unified security platform with full visibility and control.

South Australian security services provider Arxis has partnered with Credit Union SA to overhaul its cybersecurity posture and strengthen operational resilience.

Previously, visibility and management were distributed across a number of systems. “This is common in environments that evolve over time,” said Arxis CEO and co-founder, Tim Fitzgerald.

Arxis replaced Credit Union SA’s existing portfolio of solutions with Fortinet Security Fabric to create a single, integrated security platform the provides unified visibility and control across the organisation.

“This enables faster correlation of events, more efficient policy management and stronger overall control,” said Fitzgerald.

As a smaller operator in a regulated market, Credit Union SA faces certain challenges. It must comply with the same regulatory standards as the major banks, while operating with a smaller team.

“Credit Union SA works within APRA prudential standards that are comparable to those applied to the large banks, meaning governance, auditability and demonstrable control are critical,” he said.

The challenge extends beyond implementing technology — it includes ensuring that controls are consistently applied, monitored, and evidenced in a way that satisfies regulatory expectations.

“Every decision must be defensible from a governance and compliance perspective,” he added.

This regulatory discipline ultimately shaped the consolidation and Credit Union SA’s security posture is aligned with regulated financial institutions. “It’s improved operational efficiency and given greater confidence for internal teams to focus on member service,” he said.

Managing a significant uplift like this is also more challenging in a smaller organisation.

“In larger organisations, there are often dedicated teams across security architecture, project delivery and change management. In smaller organisations, these responsibilities are typically managed across a more compact team,” Fitzgerald told CRN Australia.

“That means transformation needs to be carefully planned and executed to maintain business continuity while uplift is underway,” he added.

While bringing different systems and tools into a cohesive, integrated model requires disciplined sequencing and strong governance, there are advantages in lean organisations.

“The advantage is that once alignment is achieved, smaller organisations can often move efficiently and realise benefits more quickly,” he said.

Consolidation to improve visibility

The project consolidated all major layers of Credit Union SA’s security environment — including network protection, remote access, endpoint security, identity management, device access control, and security logging and oversight.

As is common in multi-platform environments, these capabilities were managed across a number of complementary technologies, each with its own interface and management layer.

“This meant that analysing and correlating events across network, endpoint and identity layers required more manual effort,” Fitzgerald explained.

By bringing visibility into a unified platform, Credit Union SA can now more efficiently correlate activity across the environment.

This enables faster investigation, stronger monitoring and improved operational oversight, he said.

Global footprint, local expertise

Arxis was recently recognised by Fortinet as an Expert Partner, recognising its expertise in this space. Fitzgerald said Fortinet has a strong capability across financial services environments, while local delivery was critical.

“It enabled a more tailored, responsive implementation approach and a strong working relationship throughout the project.

At the same time, local delivery was critical to ensuring alignment with Credit Union SA’s regulatory, operational and community context.

“Local expertise enabled a more tailored, responsive implementation approach and a strong working relationship throughout the project,” he said.