Ideagen PLAR Consulting Packages

_____________________________________________________________________________________________

PLAR Consulting Packages Professional Consulting Services July 2025

©July 2025 Ideagen CompliSpace Pty Ltd 1

PLAR Consulting Packages: Overview Ideagen provides PLAR Module Consulting packages to support clients to meet their obligations and objectives, mapped to our PLAR framework (Policies, Learning, Assurance and Reporting) which helps transform words on a page into action, ownership and accountability.

This guide provides an overview of the objectives and inclusions in each PLAR Module Consulting Package. These packages are delivered through a series of consultant-led project meetings and has been designed to include: • A defined project timeframe in which the project is to be completed • A proposed scope of included work, as agreed to with the customer • An allocated allowance for consultant-led customer meetings to meet the identified outcomes • Clear project parameters and defined project outcomes • Comprehensive support with project management and product implementation embedded • Access to subject matter experts • Context and jurisdiction specific consultation Each package is presented as fixed price. Your consultant will work with you to scope and confirm your key project objectives. If your needs change during your project, your consultant will work with you to re-scope your package accordingly.

Industry Key • • • • •

Aged Care Residential Aged Care Home Care Home Care Standalone Education Commercial (C) ©July 2025 Ideagen CompliSpace Pty Ltd 2

• •

Financial Services (FS) Not-for-Profit (NFP)

©July 2025 Ideagen CompliSpace Pty Ltd 3

Contents PLAR Consulting Packages: Overview .......................................................................2 AFSL Governance ......................................................................................................5 AML/CTF....................................................................................................................6 ASX Governance ........................................................................................................7 Board Governance ....................................................................................................8 Boarding ....................................................................................................................9 Business Continuity Management ..........................................................................10 Child Safe/Safeguarding ..........................................................................................11 Complaints Management........................................................................................12 Compliance .............................................................................................................13 Cyber Security .........................................................................................................14 Enterprise Risk Management ..................................................................................15 Fraud and Corruption..............................................................................................16 Human Resources ...................................................................................................17 Overseas Students ..................................................................................................19 Policy Management ................................................................................................20 Privacy .....................................................................................................................21 School Registration/Accreditation ..........................................................................22 Student Duty of Care...............................................................................................23 Workplace Safety ....................................................................................................24 Whistleblower .........................................................................................................25

©July 2025 Ideagen CompliSpace Pty Ltd 4

AFSL Governance Financial Services

Overview Ideagen CompliSpace’s AFSL Module has been developed to help organisations address the general obligations set out in section 912A of the Corporations Act 2001(Cth). It covers the four key compliance areas covered by ASIC in its Regulatory Guide 104 as well as the breach reporting to ASIC in line with the Corporations Act (s(912D(1)) and ASIC Regulatory Guide 78.

Objectives The objective of this consultation package is to support the implementation of a suite of policies and procedures designed to assist organisations to better manage their compliance with their General Obligations under section 912A of the Corporations Act. The Module includes 18 policies, procedures and statements that map to the Corporations Act obligations and ASIC Regulatory Guide 104. You will work with your Solution Consultant to identify your organisations’ key deliverables associated with this PLAR Consulting Package. Your consultant will be able to confirm what is achievable within the time/resources available. Key deliverables you may negotiate with your consultant include one or a combination of the following: Policy

Learning Assurance

The AFSL Governance Policies Module includes policies and procedures designed to assist organisations to better manage their compliance with their General Obligations under section 912A of the Corporations Act. Work with your consultant to • get a better understanding of the module/program structure, including sources of obligations and key requirements • receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

The Learning element of this Module focuses on People Management. Work with your consultant to • assign the ASX Governance Learning Course and establish an associated report.

A significant part of AFSL compliance is being able to demonstrate that policies, procedures and processes are followed in practice. Work with your consultant to • identify the Assurance resources included in your module subscription you would like to have set up as part of your consulting package.

• contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation.

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the Ideagen CompliSpace AFSL Module Specification Sheet Project Timeframe

8 weeks

Estimated Contact Time

5.5 hours

Additional Time Required

by Customer

6-10 hours

©July 2025 Ideagen CompliSpace Pty Ltd 5

AML/CTF Financial Services

Overview The Ideagen CompliSpace Anti-Money Laundering and Counter-Terrorism Financing Module (AML/CTF Module) has been written specifically to address obligations under the Act and the Rules.

Objectives Organisations with one or more designated services that pose a risk for money laundering and terrorism funding are required to comply with the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) (Act) and the Anti-Money Laundering and Counter-Terrorism Finance Rules Instrument 2007 (No. 1) (Rules).

You will work with your Solution Consultant to identify your organisations’ key deliverables associated with this PLAR Consulting Package. Your consultant will be able to confirm what is achievable within the time/resources available. Key deliverables you may negotiate with your consultant include one or a combination of the following: Policy

Learning Assurance

The AML/CTF Program in PolicyConnect is divided into two key parts: 1. Part A: General 2. Part B: Customer Identification Work with your consultant to • get a better understanding of the module/program structure, including sources of obligations and key requirements • receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

Work with your consultant to • assign the two AML/CTF Learning Courses and establish an associated report.

A key part of AML/CTF compliance is being able to demonstrate efficient and effective risk assessment and management regarding AML/CTF risks. The Assurance component of the Module includes an AML/CTF Risk Register and corresponding compliance tasks to assist in the management of key AML/CTF risks. Work with your consultant to • identify the Assurance resources included in your module subscription you would like to have set up as part of your consulting package.

• contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation.

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the Ideagen CompliSpace AML/CTF Module Specification Sheet Project Timeframe

6 weeks

Estimated Contact Time

4 hours

Additional Time Required

by Customer

6-8 hours

©July 2025 Ideagen CompliSpace Pty Ltd 6

ASX Governance Financial Services

Overview Organisations listed on the Australian Securities Exchange (ASX) operate in a highly regulated environment. Entities listed on the ASX are required to comply with various obligations, including those outlined in the Corporations Act 2001 (Cth) and the ASX Listing Rules. The Ideagen CompliSpace ASX Governance Policies Module includes key policies and procedures that address these obligations.

Objectives The objective of this consultation package is to meet the core obligations of an ASX-listed entity, including continuous disclosure, communication with stakeholders, and the management of conflicts of interest. You will work with your Solution Consultant to identify your organisations’ key deliverables associated with this PLAR Consulting Package. Your consultant will be able to confirm what is achievable within the time/resources available. Key deliverables you may negotiate with your consultant include one or a combination of the following: Policy

Learning Assurance

The ASX Governance Policies Module includes policies and procedures covering ASX Listing Rules and Corporations Act obligations regarding Continuous Disclosure, Diversity, Communications, Investor Relations, Conflicts of Interest, Related Party Transactions and Securities Trading.

Work with your consultant to • get a better understanding of the module/program structure, including sources of obligations and key requirements • receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

Work with your consultant to • assign the ASX Governance Learning Course and establish an associated report.

A key part of ASX compliance is being able to demonstrate efficient and effective assessment and management of key risks. The Assurance component of the Module includes an ASX Risk Register and corresponding compliance tasks to assist in the management of key ASX risks. Work with your consultant to • identify the Assurance resources included in your module subscription you would like to have set up as part of your consulting package.

• contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation.

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the Ideagen CompliSpace ASX Governance Module Specification Sheet Project Timeframe

6 weeks

Estimated Contact Time

4 hours

Additional Time Required

by Customer

6-8 hours

©July 2025 Ideagen CompliSpace Pty Ltd 7

Board Governance Commercial, Education, Financial Services and Not-for-Profit

Overview Ideagen CompliSpace’s Board Governance Module is designed to assist organisations to streamline Board Management through the provision of a carefully planned approach to Board Governance practices, mapped to Director’s duties under both statute and general law.

Objectives The Board Governance Module in PolicyConnect provides a centralised location for your organisation’s directors to access key policies and procedures, board minutes, calendars and reading materials. The objective of this consultation package is to support the configuration of your module in line with organisational requirements.

Policy

Assurance*

Work with your consultant to create a secure environment for • maintaining Board and Committee calendars • publishing Board agendas, papers and minutes • linking key documents such as constitutions, charters and guidelines • publishing director and executive member profiles • linking to the key operational and governance policies • maintaining details of key insurance policies and audit services • linking key template documents used by the Company Secretary The Board Governance Module includes a range of forms, registers and workflows designed to improve board management processes such as the Board Performance Review Process. Work with your consultant to • identify the Assurance resources included in your module subscription you would like to have set up as part of your consulting package.

• contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation.

* Assurance can also be configured to manage Conflicts of Interest and Related Party Transactions Registers. For further information, please contact your Ideagen CompliSpace representative.

Module Specification For a comprehensive list of this modules’ inclusions, please refer to • Ideagen CompliSpace Board Governance Specification Sheet (CFS & NFP) • Ideagen CompliSpace Board Governance Specification Sheet (Education) Project Timeframe

4 weeks

Estimated Contact Time

4 hours

Additional Time Required

by Customer

10-12 hours

©July 2025 Ideagen CompliSpace Pty Ltd 8

Boarding Education

Overview Ideagen CompliSpace’s Boarding Module created to provide a holistic governance, risk and compliance framework to ensure a school continually meets its legal and regulatory requirements and represents best practice through its compliance with the Australian Boarding Standards, covered over seven key sections.

Objectives The Boarding Module’s policies and procedures have been designed to assist schools to better manage the complex process of complying with over 100 requirements in the Standard. You will work with your Solution Consultant to identify your organisations’ key deliverables associated with this PLAR Consulting Package. Your consultant will be able to confirm what is achievable within the time/resources available. Key deliverables you may negotiate with your consultant include one or a combination of the following: Policy

Learning

Assurance

The key sections of the Module are mapped to the sections of the Standard. Work with your consultant to • get a better understanding of the module/program structure, including sources of obligations and key requirements • receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

As part of the Boarding Module, we provide an online Boarding Training Course to assist your school to effectively communicate the key elements of the Module to all. Work with your consultant to • assign the Boarding Learning Courses and establish the associated reports.

The Boarding Module includes related risk management and compliance content. Work with your consultant to • identify the Assurance resources included in your module subscription you would like to have set up as part of your consulting package.

• contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation.

*Additional professional services packages are available to enhance the Boarding PLAR Consulting Package

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the Ideagen CompliSpace Boarding Module Specification Sheet Project Timeframe

6 weeks

Estimated Contact Time

4 hours

Additional Time Required

by Customer

10-12 hours

©July 2025 Ideagen CompliSpace Pty Ltd 9

Business Continuity Management Aged Care Residential, Aged Care Home Care, Commercial, Education, Financial Services, Home Care Standalone, Not-for-Profit

Overview The Ideagen CompliSpace BCM Module is developed in line with AS ISO 22301:2020 Security and resilience – Business continuity management systems – Requirements (Standard) to ensure that business continuity is managed in an efficient manner. consistent manner.

Objectives The BCM Module** is designed to enable your organisation to implement a Business Continuity Management System (BCMS). You will work with your Solution Consultant to identify your organisations’ key deliverables associated with this PLAR Consulting Package. Your consultant will be able to confirm what is achievable within the time/resources available. Key deliverables you may negotiate with your consultant include one or a combination of the following: Policy

Learning

Assurance

A BCM supports organisations to manage their business continuity by helping them gain a whole-of-enterprise understanding of business disruption risks and the organisation’s overall level of preparedness. Work with your consultant to • get a better understanding of the module/program structure, including sources of obligations and key requirements • receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

One of the major disruption-related risks for organisations is a lack of awareness among staff that a business disruption event can and will occur.

Work with your consultant to • assign the BCM Learning Course and establish an associated report.

Identifying business disruption-related risks and establishing controls is a key part of the P-LAR process. Work with your consultant to • identify the Assurance resources included in your module subscription you would like to have set up as part of your consulting package.

• contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation.

*Additional professional services packages are available to enhance the Business Continuity PLAR Consulting Package. **Note the BCM Module is designed to integrate with Ideagen CompliSpace’s Risk Management Module which has been developed following the International Risk Management Standard AS/NZ ISO 31000:2018

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the Ideagen CompliSpace Business Continuity Management Module Specification Sheet Project Timeframe

6 weeks

Estimated Contact Time

4 hours

Additional Time Required

by Customer

10-12 hours

©July 2025 Ideagen CompliSpace Pty Ltd 10

Child Safe/Safeguarding Education

Overview Ideagen CompliSpace’s Child Safe/Safeguarding Module is made up of work systems, practices, policies and procedures designed to maintain a child safe environment and to embed an organisational culture of child safety while ensuring ongoing compliance with child protection laws and regulations, kept up to date with key legal and regulatory changes.

Objectives The Child Safety Module are designed to ensure ongoing compliance with child safe organisations and child protection laws and regulations in your relevant jurisdiction and are kept up to date with key legal and regulatory changes.

Policy

This module addresses each area of a school’s responsibilities, from recruitment to reporting and continuous improvement, and cover all relevant forms of abuse and harm, including neglect, physical and sexual abuse, exposure to domestic violence and emotional and psychological harm. Work with your consultant to • get a better understanding of the module/program structure, including sources of obligations and key requirements • receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

Learning The Child Safety Modules come with a jurisdictionally tailored online Child Safety Learning Course. Work with your consultant to • assign the Child Safety Learning Course and establish an associated report.

Assurance Identifying child safety risks and establishing associated risk controls is a key part of the P-LAR process. Work with your consultant to • identify the Assurance resources included in your module subscription you would like to have set up as part of your consulting package.

• contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation. *Additional packages available to enhance the Child Safe/Safeguarding Module subscription .

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the Ideagen CompliSpace Child Safety Module Specification Sheet Project Timeframe

10 weeks

Estimated Contact Time

8 hours

Additional Time Required

by Customer

10-12 hours

©July 2025 Ideagen CompliSpace Pty Ltd 11

Complaints Management Commercial, Education, Financial Services, Not-for-Profit

Overview Effective complaints management is a key part of an effective governance framework in every organisation. Capture and manage complaints effectively, and your organisation has established an effective ‘risk radar’ that lets you know when your key stakeholders aren’t satisfied with your services and allows you to do something about it before you lose control of the conversation.

Objectives Ideagen CompliSpace’s Complaints Handling Module is specifically designed to document the steps that are required to manage a complaint effectively. You will work with your Solution Consultant to identify your organisations’ key deliverables associated with this PLAR Consulting Package. Your consultant will be able to confirm what is achievable within the time/resources available. Key deliverables you may negotiate with your consultant include one or a combination of the following:

Policy

Learning Assurance

Work with your consultant to • get a better understanding of the module/program structure, including sources of obligations and key requirements • receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

Work with your consultant to • assign the Complaints Management Learning Course and establish an associated report.

The Complaints Management Module includes related risk management and compliance content. Work with your consultant to • identify the Assurance resources included in your module subscription you would like to have set up as part of your consulting package.

• contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation.

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the • Ideagen CompliSpace Complaints Management Module Specification Sheet (CFS) • Ideagen CompliSpace Complaints Handling Module Specification Sheet (Education) • Ideagen CompliSpace Complaints Management Module Specification Sheet (NFP) Project Timeframe

8 weeks

Estimated Contact Time

8 hours

Additional Time Required

by Customer

10-12 hours

©July 2025 Ideagen CompliSpace Pty Ltd 12

Compliance Education, Commercial, Financial Services, Not-for-Profit

Overview Ideagen CompliSpace’s Compliance Program forms an important part of an organisation’s governance framework. While risk focuses on the future, compliance focuses on the present to ensure organisations are meeting their legal and regulatory policy management and contractual obligations, developed in line with the International Standard for Compliance Management Systems (AS/ISO 19600:2015).

Objectives Adopting the Standard’s continuous improvement process of Plan, Do, Check and Act (PDCA). The PDCA continuous improvement cycle recognises that compliance is never a static state but must always be active and responsive to change. A risk-based approach to compliance means that we identify the areas of compliance that are the highest risk and ensure that we are satisfactorily managing these as the highest priority. You will work with your Solution Consultant to identify your organisations’ key deliverables associated with this PLAR Consulting Package. Your consultant will be able to confirm what is achievable within the time/resources available. Key deliverables you may negotiate with your consultant include one or a combination of the following:

Policy

Learning Assurance

The Compliance Management Module documents the four elements of Plan, Do, Check and Act outlined in the Australian Standard for Compliance Management Systems AS ISO 37301:2023. Work with your consultant to • get a better understanding of the module/program structure, including sources of obligations and key requirements • receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

The Compliance Management Module includes an online learning Course. Work with your consultant to • assign the Compliance Learning Course and establish an associated report.

The Assurance component of the Compliance Management Module includes a variety of registers, forms and surveys. Work with your consultant to • identify the Assurance resources included in your module subscription you would like to have set up as part of your consulting package.

• contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation.

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the Ideagen CompliSpace Compliance Module Specification Sheet Project Timeframe

8 weeks

Estimated Contact Time

8 hours

Additional Time Required

by Customer

10-12 hours

©July 2025 Ideagen CompliSpace Pty Ltd 13

Cyber Security Aged Care Residential, Aged Care Home Care, Commercial, Financial Services, Home Care Standalone, Not-for-Profit

Overview The increasing frequency and sophistication of cyber threats pose significant risks to business operations, financial assets and reputations. The Ideagen CompliSpace Cyber Security Module is designed in line with: • the Essential 8 - a set of baseline mitigation strategies recommended by the ASD’s Australian Cyber Security Centre (ACSC) to help organisations protect themselves against cyber threats • the National Institute for Technology (NIST) Cybersecurity Framework which is one of the most widely used cyber security frameworks global

Objectives The objective of this consultation package is to support implementation of a Cyber Security Policy and Procedure documents. You will work with your Solution Consultant to identify your organisations’ key deliverables associated with this PLAR Consulting Package. Your consultant will be able to confirm what is achievable within the time/resources available. Key deliverables you may negotiate with your consultant include one or a combination of the following: Policy

Learning Assurance

Work with your consultant to • get a better understanding of the module/program structure, including sources of obligations and key requirements receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

Work with your consultant to • assign the Cyber Security Learning Course and establish an associated report.

The Cyber Security Module includes related risk management and compliance content, delivered through our Assurance product. Work with your consultant to • identify the Assurance resources included in your module subscription you would like to have set up as part of your consulting package.

• contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation.

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the Ideagen CompliSpace Cyber Security Module Specification Sheet Project Timeframe

4 weeks

Estimated Contact Time

2 hours

Additional Time Required

by Customer

10-12 hours

©July 2025 Ideagen CompliSpace Pty Ltd 14

Enterprise Risk Management Commercial, Education, Financial Services, Not-for-Profit

Overview Ideagen CompliSpace’s Enterprise Risk Management Module provides a framework to help develop an integrated approach to governance, risk and compliance including effective documentation of internal policies and procedures, staff training, and monitoring performance to provide meaningful outcomes. The implementation of effective risk and compliance systems are a key part of an effective governance framework in every organisation.

Objectives The Ideagen CompliSpace Enterprise Risk Management Module has been developed in line with the International Standard for Risk Management (ISO 31000:2018). The Standard is built around three interrelated building blocks that work together to ensure that an Enterprise Risk Management system is implemented effectively. You will work with your Solution Consultant to identify your organisations’ key deliverables associated with this PLAR Consulting Package. Your consultant will be able to confirm what is achievable within the time/resources available. Key deliverables you may negotiate with your consultant include one or a combination of the following:

Policy

Learning

Assurance

The Enterprise Risk Management Module includes a documented Program in PolicyConnect developed in line with the International Standard for Risk Management (ISO 31000:2018). Work with your consultant to • get a better understanding of the module/program structure, including sources of obligations and key requirements • receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

In this course, risk management will be explained in detail, equipping you with the knowledge required to implement a risk management system effectively in your organisation. Work with your consultant to • assign the Risk Management Learning Course and establish an associated report.

The Enterprise Risk Management Module comes with a library of common macro-operational risks that is delivered through our Assurance product and can be adapted for an organisation’s particular circumstances as it develops its own risk registers. Work with your consultant to • identify the Assurance resources included in your module subscription you would like to have set up as part of your consulting package.

• contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation.

*Additional packages available to enhance the Enterprise Risk Management Module subscription.

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the Ideagen CompliSpace Enterprise Risk Management Module Specification Sheet Project Timeframe

8 weeks

Estimated Contact Time

8 hours

Additional Time Required

by Customer

10-12 hours

©July 2025 Ideagen CompliSpace Pty Ltd 15

Fraud and Corruption Commercial, Education, Financial Services, Not-for-Profit

Overview Ideagen CompliSpace’s Fraud and Corruption Module provides a documented Fraud and Corruption Control Program developed in line with the Australian Fraud and Corruption Control Standard AS 8001-2008. The Program provides examples of common types of fraud and corruption that may occur.

Objectives The Ideagen CompliSpace Fraud and Corruption Module sets processes and systems to use at each stage of the key fraud and corruption prevention process. You will work with your Solution Consultant to identify your organisations’ key deliverables associated with this PLAR Consulting Package. Your consultant will be able to confirm what is achievable within the time/resources available. Key deliverables you may negotiate with your consultant include one or a combination of the following:

Policy

Learning

Assurance

Work with your consultant to • get a better understanding of the module/program structure, including sources of obligations and key requirements • receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

As part of the Fraud and Corruption Module, we provide an online Fraud and Corruption Training Course to assist your organisation to effectively communicate the key elements of the Module to all staff. Work with your consultant to • assign the Fraud and Corruption Management Learning Course and establish an associated report.

Identifying fraud and corruption related risks and establishing associated controls is a key part of the P-LAR process. To this end, the Assurance system comes pre-populated with a detailed Fraud and Corruption Risk Register and an associated selection of mitigating control tasks. Work with your consultant to • identify the Assurance resources included in your module subscription you would like to have set up as part of your consulting package.

• contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation.

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the • Ideagen CompliSpace Fraud and Corruption Module Specification Sheet (Education) • Ideagen CompliSpace Fraud and Corruption Module Specification Sheet (CFS & NFP) Project Timeframe

4 weeks

Estimated Contact Time

2 hours

Additional Time Required

by Customer

6-10 hours

©July 2025 Ideagen CompliSpace Pty Ltd 16

Human Resources Commercial, Education, Financial Services, Not-for-Profit

Overview Ideagen CompliSpace’s Human Resources Module is designed to help organisations manage the entire employment lifecycle from recruitment, training and development, growth, and exit, with secure access to HR Administration resources to assist the management of internal processes.

Objectives The Ideagen CompliSpace Human Resources Module has been designed to assist organisations to better management the entire employment lifecycle. You will work with your Solution Consultant to identify your organisations’ key deliverables associated with this PLAR Consulting Package. Your consultant will be able to confirm what is achievable within the time/resources available. Key deliverables you may negotiate with your consultant include one or a combination of the following:

Policy

Work with your consultant to • get a better understanding of the module/program structure, including sources of obligations and key requirements • receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

Learning The Learning Courses provided with this module are designed to assist the organisation to effectively communicate the key elements of the Human Resources program to all staff. Work with your consultant to • assign the various Human Resource Learning Courses and establish associated reports.

Assurance The HR Module includes related risk management and compliance content that is delivered through our Assurance product. It also includes tools to support the implementation and embedding of the Module to enable the effective management and monitoring of your compliance obligations. Work with your consultant to • identify the Assurance resources included in your module subscription you would like to have set up as part of your consulting package.

• contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation. *Additional charges for Enterprise Agreement Mapping where applicable

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the • Ideagen CompliSpace Human Resources Module Specification Sheet (Education) • Ideagen CompliSpace Human Resources Module Specification Sheet (CFS & NFP) Project Timeframe

12 weeks

Estimated Contact Time

8 hours

Additional Time Required

by Customer

12-16 hours

©July 2025 Ideagen CompliSpace Pty Ltd 17

©July 2025 Ideagen CompliSpace Pty Ltd 18

Overseas Students Education

Overview Ideagen CompliSpace’s Overseas Students Module has been developed in accordance with the National Code of Practice for Providers of Education and Training to Overseas Students 2018 and the total Education Services for Overseas Students (ESOS) Framework to enable schools to apply for and remain CRICOS registered.

Objectives Our Overseas Students Module has been designed to assist schools to better manage the complex process of ongoing CRICOS Registration and compliance with Commonwealth and state or territory legislation. You will work with your Solution Consultant to identify your organisations’ key deliverables associated with this PLAR Consulting Package. Your consultant will be able to confirm what is achievable within the time/resources available. Key deliverables you may negotiate with your consultant include one or a combination of the following:

Policy

Learning

Assurance

All our policies are kept up to date with relevant legal and regulatory changes and all procedures and documents are mapped to meet a school’s legislative obligations under the total ESOS Framework and the 11 Standards in the 2018 National Code. Work with your consultant to • get a better understanding of the module/program structure, including sources of obligations and key requirements • receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

As part of the Overseas Students Module, through CompliLearn, we provide an online Overseas Students Training Course to assist your school to effectively communicate the key elements of the Module to all staff. Work with your consultant to • assign the Overseas Students Learning Course and establish an associated report.

The Overseas Students Module comes packaged with associated Assurance content that contains a series of compliance tasks and tools to support the implementation and embedding of the module to enable the effective management and monitoring of your key compliance obligations. Work with your consultant to • identify the Assurance resources included in your module subscription you would like to have set up as part of your consulting package.

• contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation.

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the Ideagen CompliSpace Overseas Students Module Specification Sheet Project Timeframe

6 weeks

Estimated Contact Time

4 hours

Additional Time Required

by Customer

10-12 hours

©July 2025 Ideagen CompliSpace Pty Ltd 19

Policy Management Commercial, Education, Financial Services, Home Care, Not-for-Profit

Overview Policy management is a core element of governance, risk and compliance that is essential for all organisations. Organisations are required to manage hundreds of policies in a climate of rapidly changing compliance obligations and evolving business objectives and strategies.

Objectives The Policy Management Program in PolicyConnect provides the foundation policy, procedures and processes for Policy Management in your organisation. You will work with your Solution Consultant to identify your organisations’ key deliverables associated with this PLAR Consulting Package. Your consultant will be able to confirm what is achievable within the time/resources available. Key deliverables you may negotiate with your consultant include one or a combination of the following:

Policy

Learning Assurance

Work with your consultant to • get a better understanding of the module/program structure • receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

Work with your consultant to • assign the Policy Management Learning Course to the relevant stakeholder groups and establish the associated reports.

As part of the Policy Management Module, organisations can be assisted in setting up a policy review process in Assurance, utilising the Checklist and workflow tools. This enables an automated document review and approval and ongoing review tool in Assurance. Your consultant will work with you to determine what review and approval workflows are needed, and scope this work accordingly.

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the Ideagen CompliSpace Policy Management Module Specification Sheet Project Timeframe

4 weeks

Estimated Contact Time

2 hours

Additional Time Required

by Customer

4-6 hours

©July 2025 Ideagen CompliSpace Pty Ltd 20

Privacy Commercial, Education, Financial Services, Not-for-Profit

Overview Ideagen CompliSpace’s Privacy Module has been developed to support organisations that are required to handle sensitive information, providing an understanding of privacy related concepts related to the 13 Australian Privacy Principles (APPs) and how to address each APP to ensure compliance.

Objectives The Privacy Module explains all the basic privacy-related concepts in plain English and documents the key requirements of each of the 13 APPs, specifying how an organisation applies each APP to ensure compliance. The Module also includes procedures to address privacy data breaches to comply with the Notifiable Data Breach scheme. You will work with your Solution Consultant to identify your organisations’ key deliverables associated with this PLAR Consulting Package. Your consultant will be able to confirm what is achievable within the time/resources available. Key deliverables you may negotiate with your consultant include one or a combination of the following:

Policy

Learning

Assurance

Work with your consultant to • get a better understanding of the module/program structure, including sources of obligations and key requirements • receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

As part of the Privacy Module, through CompliLearn, we provide an online Privacy Training Course to assist your organisation to effectively communicate the key elements of the Module to all staff. Work with your consultant to • assign the various Privacy Learning Course to the relevant stakeholder groups and establish the associated reports.

The Privacy Module includes related risk management and compliance content. Work with your consultant to • identify the Assurance resources included in your module subscription you would like to have set up as part of your consulting package.

• contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation.

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the • Ideagen CompliSpace Privacy Module Specification Sheet (Education) • Ideagen CompliSpace Privacy Module Specification Sheet (CFS & NFP) Project Timeframe

8 weeks

Estimated Contact Time

6 hours

Additional Time Required

by Customer

10-12 hours

©July 2025 Ideagen CompliSpace Pty Ltd 21

School Registration/Accreditation Overview All Australian schools are required to be provisionally registered or registered and/or accredited in their relevant state or territory before operating as a school or commencing the education of a child at any level. Each Ideagen CompliSpace Registration Module is unique to the relevant jurisdiction. All our Registration Modules have been systematically developed to address each registration standard requirement included in state/territory registration legislation, regulations and guidance.

Objectives To remain registered, schools must abide by the standards and registration requirements sourced from the relevant legislation, regulations and guidance in their jurisdiction. When a school’s registration is being reviewed, registration authorities assess whether the school is maintaining compliance with its legal and regulatory obligations. You will work with your Solution Consultant to identify your organisations’ key deliverables associated with this PLAR Consulting Package. Your consultant will be able to confirm what is achievable within the time/resources available. Key deliverables you may negotiate with your consultant include one or a combination of the following: Policy

Assurance

Within each Registration Module, we deliver a full suite of online policies and procedures that a school requires to meet its registration requirements (unless these policies and procedures are provided within a separate Ideagen CompliSpace Module (for example, Child Protection). Work with your consultant to • get a better understanding of the module/program structure, including sources of obligations and key requirements • receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

Identifying registration requirements and establishing a compliance framework is a key part of the P-LAR process. Work with your consultant to • identify the Assurance resources included in your module subscription you would like to have set up as part of your consulting package.

• contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation.

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the Ideagen CompliSpace Registration and Accreditation Module Specification Sheet Project Timeframe

8 weeks

Estimated Contact Time

4 hours

Additional Time Required

by Customer

10-12 hours

©July 2025 Ideagen CompliSpace Pty Ltd 22

Student Duty of Care Education

Overview Ideagen CompliSpace’s Student Duty of Care Module has been developed to help schools implement risk controls against student safety hazards in line with National and State and Territory laws, including processes and systems to successfully identify, mitigate, and respond effectively to safety hazards, demonstrate compliance, and continuously improve.

Objectives Ideagen CompliSpace provides a documented Student Duty of Care Program that is regularly updated in line with national and state/territory laws. It sets processes and systems that a school can use to identify, mitigate and respond effectively to safety hazards. The Program’s comprehensive suite of policies covers student health, behaviour, extracurricular activities and general welfare and safety. You will work with your Solution Consultant to identify your organisations’ key deliverables associated with this PLAR Consulting Package. Your consultant will be able to confirm what is achievable within the time/resources available. Key deliverables you may negotiate with your consultant include one or a combination of the following:

Policy

Learning Assurance

The Student Duty of Care Program includes a comprehensive suite of policies. Work with your consultant to • get a better understanding of the module/program structure, including sources of obligations and key requirements • receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

Work with your consultant to • assign the various Duty of Care Learning Course to the relevant stakeholder groups and establish the associated reports.

The Assurance system is critical to ensuring that a school’s Student Duty of Care Program comes alive and keeps students safe. Work with your consultant to • identify the Assurance resources included in your module subscription you would like to have set up as part of your consulting package.

• contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation.

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the Ideagen CompliSpace Student Duty of Care Module Specification Sheet Project Timeframe

8 weeks

Estimated Contact Time

8 hours

Additional Time Required

by Customer

12-14 hours

©July 2025 Ideagen CompliSpace Pty Ltd 23

Workplace Safety Aged Care, Commercial, Education, Financial Services, Home Care, Not-for-Profit

Overview Ideagen CompliSpace’s Workplace Safety Module has been developed to effectively implement, maintain and monitor a comprehensive Workplace/Occupational Health and Safety (WHS/OHS/OSH) system that eliminates or minimises safety risks at the organisation and organisation-sanctioned events, covering various state and territory laws, regulations, codes of practice and standards across Australia.

Objectives The WHS/OHS Module provides schools with a compliant, coordinated and systematic approach to maintaining a safe environment, minimising the risk of injury and illness within an organisation and responding to incidents effectively once they have occurred. You will work with your Solution Consultant to identify your organisations’ key deliverables associated with this PLAR Consulting Package. Your consultant will be able to confirm what is achievable within the time/resources available. Key deliverables you may negotiate with your consultant include one or a combination of the following: Policy

Learning Assurance

The WHS/OHS Module is a comprehensive workplace safety program made up of a series of key elements, including policies and procedures to eliminate or minimise common hazards. Work with your consultant to • get a better understanding of the module/program structure, including sources of obligations and key requirements • receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

Work with your consultant to • assign the various Workplace Safety Learning Courses and establish the associated reports.

The Assurance system is critical in bringing your WHS/OHS program to life. Work with your consultant to • identify the Assurance resources included in your module subscription you would like to have set up as part of your consulting package.

• contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation.

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the • Ideagen CompliSpace Workplace Safety Module Specification Sheet (Education) • Ideagen CompliSpace Workplace Safety Module Specification Sheet (CFS & NFP) Project Timeframe

8 weeks

Estimated Contact Time

8 hours

Additional Time Required

by Customer

10-12 hours

©July 2025 Ideagen CompliSpace Pty Ltd 24

Whistleblower Aged Care Residential, Aged Care Home Care, Commercial, Education, Financial Services, Home Care Standalone, Not-for-Profit

Overview Ideagen CompliSpace’s Whistleblower Module has been developed to enable your organisation to comply with the strengthened whistleblower laws and protections and establish effective procedures to manage whistleblower disclosures, avenues for people internally and externally to disclosure serious wrongdoing anonymously and in confidence, protect whistleblowers from detrimental conduct, communicate and identify the duties of staff, and create a culture of compliance and ethical behaviour

Objectives Our Whistleblower Module explains the protections that schools are required to provide to whistleblowers and documents the internal mechanisms that a school must have in place to ensure that its systems, processes and procedures are adequate to deliver and maintain an effective whistleblower. You will work with your Solution Consultant to identify your organisations’ key deliverables associated with this PLAR Consulting Package. Your consultant will be able to confirm what is achievable within the time/resources available. Key deliverables you may negotiate with your consultant include one or a combination of the following: Policy

Learning

Assurance

Our Whistleblower Module is designed to take you step-by-step through the process of setting up a whistleblower service to ensure that you have the right solution for your organisation’s particular circumstances. Work with your consultant to • get a better understanding of the module/program structure, including sources of obligations and key requirements • receive contextualisation support with the Module’s content, including considerations such as key policies, policies that should be made publicly accessible, review processes and audience considerations.

Our Whistleblower Module comes complete with an online Whistleblower Training Course, that can be used as part of induction or ongoing internal training. Work with your consultant to • assign the Whistleblower Learning Course and establish the associated report.

Our Whistleblower Module comes with risk management content that is delivered through our Assurance product. Work with your consultant to • contextualise the resource(s) identified to make sure it aligns with your organisational needs, including customising fields, workflow, notifications and custom report generation.

Module Specification For a comprehensive list of this modules’ inclusions, please refer to the • Ideagen CompliSpace Whistleblower Module Specification Sheet (AC) • Ideagen CompliSpace Whistleblower Module Specification Sheet (Education) Project Timeframe

8 weeks

Estimated Contact Time

• •

Ideagen CompliSpace Whistleblower Module Specification Sheet (CFS) Ideagen CompliSpace Whistleblower Module Specification Sheet (NFP)

1-3 hours (industry dependent)

Additional Time Required

by Customer

2-4 hours

©July 2025 Ideagen CompliSpace Pty Ltd 25

©July 2025 Ideagen CompliSpace Pty Ltd 26