CPS 230
Operational Risk Management
Outsourcing + business continuity + material service providers (in force 1 July 2025).
In plain English
This guidance outlines how APRA expects businesses to manage operational risk, including outsourcing and business continuity.
CPS 230 applies to all APRA-regulated entities. It sets expectations for managing operational risk. This includes identifying, assessing, and mitigating risks. It covers outsourcing arrangements and business continuity planning. It also addresses material service providers. The guidance is in force from 1 July 2025.
Why it matters
Businesses need to review their operational risk management practices. This includes outsourcing and business continuity plans. Meeting these expectations helps protect your business and customers from disruptions and losses.
AI-assisted summary, grounded in the source link below. Generated 2026-05-23 via gemma3:12b.
Issuing regulator
APRA →Topics
Source: https://www.apra.gov.au/news-and-publications/cps-230-operational-risk-management. Rules Mate indexes + summarises; always verify against the regulator's live publication.