APRA Consults On New Operational Risk Management Prudential Standard

The Australian Prudential Regulation Authority (APRA) has released its consultation on a new cross-industry prudential standard for operational risk management, CPS 230, which proposes to introduce a range of new requirements on APRA-regulated entities for managing operational risk and enhance existing requirements for business continuity and service provider management.

Operational resilience is critical to the stability of financial institutions and has been an area of increasing focus for APRA in recent years. The Coronavirus pandemic has proven to be a real-world test of the operational resilience of APRA-regulated entities and has rapidly escalated the pace of change in the way organisations do business. At the same time, APRA-regulated entities have had to manage a broad and multi-faceted range of operational risks, ranging from disruptions to supply chains, increasing cybersecurity risks and risks arising from geopolitical and economic uncertainty. Against