APRA CPS 230 Operational Risk Management and non-traditional service providers

Following industry feedback highlighting challenges when applying CPS 230’s contractual obligations to arrangements with non-traditional service providers (NTSPs), the Australian Prudential Regulation Authority (APRA) will consult on targeted amendments to CPS 230 Operational Risk Management (CPS 230) to apply from 1 July 2026.

NTSPs are providers that are typically market-mandated, such as stock exchanges, payment schemes or clearing and settlement facilities which rely on standardised, non-negotiable terms.

The proposed amendments will clarify APRA’s expectations for arrangements with NTSPs, particularly around contract uplift and service level monitoring.

All other risk obligations under CPS 230 will remain unchanged.

If you found this article helpful, then subscribe to our news emails to keep up to date and look at our video courses for in-depth training. Use the search box at the top right of this page or the categories list on the right hand side of this page to check for other articles on the same or related matters.

David Jacobson

Author: David Jacobson
Principal, Bright Corporate Law
Email:
About David Jacobson
The information contained in this article is not legal advice. It is not to be relied upon as a full statement of the law. You should seek professional advice for your specific needs and circumstances before acting or relying on any of the content.

 

Your Compliance Support Plan

We understand you need a cost-effective way to keep up to date with regulatory changes. Talk to us about our fixed price plans.