CPS 230 Compliance for Service Providers: Selling to Banks and APRA-Regulated Entities

Prudential Standard CPS 230 came into effect on 1 July 2025, reshaping how banks, insurers and superannuation funds manage operational risk and third-party arrangements. While the standard applies directly to APRA-regulated entities, its impact is being felt across the broader financial ecosystem. Regardless of whether you are a cloud, data-processing, IT vendor, payments provider or other professional services firm, if you provide material services to an APRA-regulated entity, CPS 230 will affect you. Read on to see how you may need to adjust the way you present your services, respond […]