CPS 234

Information Security

APRA-regulated entities must maintain info security capability + report breaches within 72 hours.

Source: https://www.apra.gov.au/sites/default/files/cps_234_july_2019_for_public_release.pdf. Rules Mate indexes + summarises; always verify against the regulator's live publication.