CPS 230 Readiness Checklist

On the 1st July 2025, compliance with the CPS 230 operational risk management standard became mandatory for APRA regulated financial institutions in Australia. The standard provides clear guidance on how firms should be managing operational risk, controls, incidents, business continuity, and third-party risk.

To help companies understand what processes they need to implement to achieve compliance, we have pulled together this CPS 230 checklist to help you identify any gaps or areas where your processes may need altering to be compliant. For areas where you are not compliant, it provides a series of tips and guidance on how to amend or improve your current processes to align with the standard.

Not only will it help you achieve compliance with CPS 230, but it will ensure your organisation has best-practice processes in place to manage risk and build resilience.

On the 1st July 2025, compliance with the CPS 230 operational risk management standard became mandatory for APRA regulated financial institutions in Australia. The standard provides clear guidance on how firms should be managing operational risk, controls, incidents, business continuity, and third-party risk.

To help companies understand what processes they need to implement to achieve compliance, we have pulled together this CPS 230 checklist to help you identify any gaps or areas where your processes may need altering to be compliant. For areas where you are not compliant, it provides a series of tips and guidance on how to amend or improve your current processes to align with the standard.

Not only will it help you achieve compliance with CPS 230, but it will ensure your organisation has best-practice processes in place to manage risk and build resilience.