APRA CPS 230 (Prudential Standard CPS 230 – Operational Risk Management) is APRA’s standard for operational risk management, business continuity, and third-party/service provider risk in the Australian financial sector. It applies to APRA-regulated entities, including banks, insurers, and superannuation trustees, as well as their Material Service Providers. Drata operationalizes CPS 230 as a fully supported framework with requirement-level guidance for both APRA-regulated entities and Material Service Providers, giving organizations across Australia and New Zealand a purpose-built way to manage CPS 230 compliance natively in the platform.
Learn more at:
- CPS 230 Overview
- CPS 230: Set Up Guidance (APRA-Regulated Entity vs. Material Service Provider)
- CPS 230: A Requirement-Level Guide
- Evidence for Not Monitored Controls (CPS 230)