APRA Proposes Amendments to CPG 234 Related to Information Security
APRA is proposing the cross-industry Prudential Practice Guide 234 Information Security (CPG 234), which will replace the existing CPG 234 Management of Security Risk in Information and Information Technology. Comments are requested by May 17, 2019.
APRA released, in November 2018, a new Prudential Standard CPS 234 Information Security (CPS 234) that applies to all APRA-regulated entities from July 01, 2019. When releasing CPS 234, APRA noted that it would consult on an updated CPG 234. The CPG 234 is designed to assist regulated entities in complying with CPS 234 on an ongoing basis and conveys observations of APRA on what constitutes good practice in information security. The key matters covered in the updated draft CPG 234 include the following:
- Guidance on information asset identification and classification
- Details to assist APRA-regulated entities when notifying APRA of information security incidents and information control weaknesses, as required under CPS 234
- Various matters for which APRA, through its ongoing supervision, has identified deficiencies in the practices of regulated entities
The guide is aimed at boards and senior management as well as risk and information technology experts within regulated entities. It outlines how entities can maintain information security capabilities commensurate with the size and complexity of their business and the sensitivity of the data they possess. It also explains how entities can optimize their resilience when aspects of their information security are managed by third parties.
Related Links
Comment Due Date: May 17, 2019
Keywords: Asia Pacific, Australia, Banking, Insurance, CPS 234, CPG 234, Information Security, APRA
Related Articles
HKMA Urges Early Action for Adherence to IBOR Fallbacks Protocol
HKMA urged authorized institutions to take early action to adhere to the IBOR Fallbacks Protocol, which ISDA is expected to publish soon.
FSB Sets Out Roadmap for Transition to Alternative Reference Rates
FSB published a global transition roadmap for London Inter-bank Offered Rate (LIBOR).
HM Treasury Publishes Response to Proposal on BRRD2 Transposition
HM Treasury published a document that summarizes the responses received from a consultation on the approach of UK to transposition of the revised Bank Resolution and Recovery Directive (BRRD2).
HM Treasury Publishes Response to Proposal on CRD5 Transposition
HM Treasury published the government response to the feedback received on the consultation for updating the prudential regime of UK before the end of the Brexit transition period.
PRA Updates Supervisory Statement on Counterparty Credit Risk
PRA published the final policy statement PS22/20, which contains the updated supervisory statement SS12/13 on counterparty credit risk.
FSB Publishes Update on Work to Address Market Fragmentation
FSB published an update on its work to address market fragmentation. FSB is working in this area in collaboration with the other standard-setting bodies.
EBA Proposes to Revise Guidelines on Incident Reporting Under PSD2
EBA proposed revisions to the guidelines on major incident reporting under the second Payment Service Directive (PSD2).
EBA Finalizes Standards for Prudential Treatment of Software Assets
EBA published the final draft regulatory technical standards specifying the methodology for prudential treatment of software assets by banks.
FSB Publishes Roadmap on Cross-Border Payments, Report on Stablecoins
FSB published a report presenting the roadmap to enhance cross-border payments by providing a high-level plan that sets ambitious but achievable goals and milestones in the five focus areas.
EIOPA Urges Insurers to Prepare for End of Brexit Transition
In a recent communication, EIOPA urged the insurance sector to complete its preparations for the end of the Brexit transition period on December 31, 2020.
