New York, NY — ACA Group (ACA), the leading governance, risk, and compliance advisor in financial services, today announced the launch of Aponix Foundations. This self-service SaaS cybersecurity solution enables firms to establish essential cyber governance without the cost or complexity of building a full in-house program.
Developed by ACA Aponix®, ACA’s cybersecurity and risk division, Aponix Foundations provides an automated platform for firms across the financial services industry, including wealth managers, venture capital firms, asset managers, and broker-dealers.
Cybersecurity remains a top concern for compliance officers across the financial services industry. According to ACA’s 2025 Investment Management Compliance Testing Survey, 55% of firms increased testing around cybersecurity this year, making it one of the top three compliance priorities. Despite this heightened focus, many firms still face challenges in maintaining visibility and strategic oversight; especially when IT functions are outsourced.
Aponix Foundations addresses an industry oversight gap with a self-service SaaS platform designed to help compliance officers establish and manage baseline cyber governance. Integrated within ACA’s ComplianceAlpha® platform, the program provides firms with a centralized hub to assess risks, monitor vulnerabilities, and oversee cyber controls alongside other compliance obligations. ACA also provides an advisory call with a consultant to review results, prioritize remediation, and establish a roadmap.
Key features include:
- Risk assessment: Robust proprietary risk assessment that produces detailed findings, recommendations, and risk ratings. Assessment is paired with a readout call with an ACA cybersecurity consultant to discuss assessment findings.
- Risk register and management tool: Prioritize and act on identified risks.
- IT and compliance checklist: Step-by-step guidance with cadence tracking for key cyber activities.
- Staff training: Web-based training modules for employee training.
- Threat monitoring: Ongoing domain and threat surveillance with automatic alerts.
- Weekly vulnerability scanning: Continuous scanning with downloadable PDF reports to support audits and exams.
Aponix Foundations provides compliance officers with the tools to verify that controls are in place, identify strategic risks, and produce evidence for audits or exams. By placing oversight directly in the hands of compliance officers and complementing MSPs’ day-to-day management of IT operations, the program helps firms meet regulators’ expectations while ensuring accountability.
“Aponix Foundations was designed to give compliance officers confidence that their firm’s cyber risks are being identified and addressed,” said Christine Tetherly-Lewis, Partner and Head of ACA Group’s Cybersecurity and Risk Advisory division. “With weekly vulnerability scans, ongoing monitoring, and evidence that can be used in audits or exams, firms can begin to take steps with cyber oversight that regulators expect without having to build a full cyber function in-house.”
“This program goes beyond wealth managers. It’s designed for any firm that has not yet established its own cybersecurity governance,” said Kerry Rider, Partner and Head of ACA Wealth. “By providing a structured, self-service platform, Aponix Foundations helps firms that rely on outsourced IT establish the checks and balances needed to manage risk strategically and consider regulatory obligations.”
About ACA Group
ACA Group (ACA) is the leading governance, risk, and compliance (GRC) advisor in financial services. For over 20 years, we’ve empowered our clients to launch, grow, and protect their business. Our global team of 1,400 employees includes former regulators and practitioners with a deep understanding of the regulatory landscape. Our innovative approach integrates advisory, managed services, distribution solutions, and analytics with our ComplianceAlpha® technology platform. For more information, visit www.acaglobal.com.
Media Contact
Gregory FCA
aca@gregoryfca.com