Supporting suppliers through onboarding and audit requirements

We support suppliers in achieving compliance for All-of-Government Marketplace onboarding—ensuring privacy, security, and readiness for annual assurance reviews.

Talk to an expert

All of Government Marketplace

Marketplace-ready services for privacy, security and audit compliance

Navigating the All-of-Government Marketplace can be complex — that’s why Cythera partners with suppliers to simplify onboarding and meet audit obligations for Information Security services. Whether you're preparing a brand-new listing or refreshing your documents for a routine review, we ensure everything you submit meets required standards and is ready for approval.

Help with completing Marketplace submissions, attestations, and listings
Security-focused support for privacy, assurance, and risk documentation
Clear direction on audit readiness and alignment with AoG control frameworks

Service detail

Helping you navigate marketplace security requirements

We support you through every stage of the Marketplace journey—from initial planning to final audit—with tailored advice on security, privacy and assurance.

What to expect from our support

Straightforward help, tailored to your needs

We guide you through compliance with the Digital Marketplace by pinpointing gaps, streamlining documentation, and reducing complexity. Whether it’s a new submission or your annual update, we keep things efficient and predictable.

Step-by-step help for Marketplace onboarding and attestations
Development of security and privacy statements with clarity
Reviews based on the Australian Government ISM and local policies

Our delivery process

Structured support tailored to assurance

We guide suppliers through every step — from early alignment to final audit approval — making Marketplace compliance straightforward and stress-free.

Review & readiness check

We begin by assessing your current documentation, identifying any gaps, and understanding key deadlines.

Remediation and uplift

We help you identify and plan for any missing components, whether it's policy documentation or risk assessments.

Submission & support

We guide you through the Marketplace submission process, prepare the required assurance statements, and are on hand to help with any questions that arise afterward.

Benefits

Why work with us

From developing your strategy to finalising submissions, we guide you through the AoG Marketplace journey with assurance.

One stop shop

With expertise spanning technical compliance, privacy, and assurance, we offer integrated guidance across all your Marketplace catalogue needs.

Proven government experience

Cythera supports smooth onboarding and renewal processes for trusted providers, delivering clear documentation and minimal disruption along the way.

Trusted by procurement

With a deep understanding of government requirements, we deliver documentation that’s audit-ready and helps move things forward faster.

What comes next

Expand your security coverage

Whether you're onboarding, scaling up, or maintaining compliance, we support you throughout the journey.

Navigate your upcoming annual assurance review with expert help
Enhance your maturity beyond what’s required for Marketplace participation
Get support across additional frameworks and government catalogues

Talk to an expert

Web Filter, CASB & DLP (Cloud Access Security Broker & Data Loss Prevention)

Monitor and manage how users interact with cloud, web, and AI platforms — including movement of sensitive data.

Web Application Penetration Testing

Uncover hidden flaws in your web apps — from session handling to access controls — through in-depth security reviews.

Frequently asked questions

From risk assessment to rapid response - we’re with you every step of the way.

How can Cythera assist with ISM compliance?

Cythera helps you align with government-grade standards such as the ISM. We support your audit readiness with guidance on documentation, control validation, and assurance reporting.

Is an Information Security Assurance Plan (ISAP) required for government contracts?

Yes. Many Australian government contracts require an ISAP to demonstrate how security risks will be managed. Cythera can help you develop and implement an ISAP aligned to Protective Security Policy Framework (PSPF) and other government requirements.

What is the All-of-Government Marketplace?

The AoG Marketplace is a centralised procurement system used by Australian public sector organisations to source pre-approved suppliers. It streamlines purchasing for services like cybersecurity consulting, compliance support, and risk management assessments.

What kind of services are included in the Information Security catalogue?

Our service portfolio includes security risk assessments, architecture reviews, secure development training, privacy consulting, and vCISO leadership. All services are delivered by experienced professionals who understand the Australian security and compliance landscape.