Featured Product

    APRA Updates Guidance on Cloud Computing Services

    September 24, 2018

    APRA released updated guidance, in the form of an Information Paper, on the use of shared computing services, such as cloud, by APRA-regulated entities. The new paper acknowledges that advancements in cloud computing service offerings over the past three years have improved the ability of APRA-regulated entities to manage the risks involved. However, it also emphasizes the need for entities to be mindful of the differing levels of responsibility for operating and managing these arrangements.

    This Information Paper is relevant for a broad audience including boards, senior management, risk management, technical specialists, and internal audit. APRA has a number of existing prudential standards and practice guides that are pertinent to cloud computing services. These Prudential Standards and Prudential Practice Guides include CPS 231 Outsourcing; SPS 231 Outsourcing; HPS231 Outsourcing; PPG 231 Outsourcing; SPG 231 Outsourcing; CPS 232 Business Continuity Management; SPS 232 Business Continuity Management; CPG 233 Pandemic Planning; (draft) CPS 234 Information Security, CPG 234 Management of Security Risk in Information and Information Technology; and CPG 235 Managing Data Risk. This Information Paper applies the concepts included in these standards and guides and APRA intends to reflect the principles in this paper in future guidance updates. For the purpose of this paper, APRA has classified these risks into three broad categories: low, heightened, and extreme.

    • For arrangements with low inherent risk not involving offshoring, APRA would not expect an APRA-regulated entity to consult with APRA prior to entering into the arrangement.
    • For arrangements with heightened risk, APRA would expect to be consulted after the APRA-regulated entity’s internal governance process is completed.
    • For arrangements involving extreme inherent risk, APRA encourages earlier engagement as these arrangements will be subjected to a higher level of scrutiny.

    The new Information Paper updates information on prudential considerations and key principles issued to APRA-regulated entities in July 2015. It has been developed in response to the growing use of the cloud by APRA-regulated entities for higher inherent risk activities and in response to the observed areas of weakness in how entities approach and manage these risks. APRA-regulated entities should note that while this information paper does not constitute formal regulation, APRA intends to incorporate the better practices described in the paper into prudential standards and practice guides in the future. Any such changes will be subject to APRA’s normal processes of consultation. 

     

    Related Links

    Keywords: Asia Pacific, Australia, Banking, Fintech, Cloud Computing, Guidance, APRA

    Related Articles
    News

    APRA Announces Deferral of Capital Reform Implementation

    APRA announced that it is deferring the scheduled implementation of Basel III reforms in Australia by one year.

    March 30, 2020 WebPage Regulatory News
    News

    IFRS Publishes Statement on Its Work During the COVID-19 Crisis

    IFRS, in its statement, emphasized that it shares global concerns about the impact of COVID–19 and is supporting its stakeholders by reconsidering timelines of its meetings and publications, providing information on the application of IFRS 9 on financial instruments, and offering calendar updates on ongoing activities.

    March 27, 2020 WebPage Regulatory News
    News

    US Agencies Announce Changes to SA-CCR and CECL Rules Due to COVID-19

    In light of the recent disruptions in economic conditions due to the COVID-19 outbreak, US Agencies (FDIC, FED, and OCC) announced two actions to allow banking organizations to continue lending to households and businesses.

    March 27, 2020 WebPage Regulatory News
    News

    IAIS Adjusts Work Program to Address Impact of COVID-19 on Insurers

    Considering the impact of COVID-19 outbreak, IAIS announced initial adjustments to its work program to provide operational relief to its member supervisors, insurers, and other stakeholders.

    March 27, 2020 WebPage Regulatory News
    News

    OSFI Announces Regulatory Adjustments to Support COVID-19 Efforts

    OSFI published three targeted industry letters that announce a series of regulatory adjustments to support the financial and operational resilience of federally regulated banks, insurers, and private pension plans in the light of COVID-19.

    March 27, 2020 WebPage Regulatory News
    News

    UK Regulators Announce Measures to Address Impact of COVID-19

    UK Regulatory Authorities published statements and guidance addressed to financial entities on dealing with the impact of the coronavirus (COVID-19) outbreak.

    March 26, 2020 WebPage Regulatory News
    News

    ISDA and Industry Request Delay in Timeline for Initial Margin Rules

    Considering the challenges posed by the COVID-19 pandemic, ISDA submitted a letter on behalf of 21 industry associations and their members requesting BCBS, IOSCO, and global regulators to suspend the current timeline for the initial margin phase-in.

    March 26, 2020 WebPage Regulatory News
    News

    FCA, FRC, and PRA Issue Joint Statement to Address Impact of COVID-19

    In response to the COVID-19 outbreak, FCA, the Financial Reporting Council (FRC), and PRA have announced a series of actions and made statements to support the continued functioning of capital markets in the UK.

    March 26, 2020 WebPage Regulatory News
    News

    EC Rule Corrects Regulation Supplementing Solvency II Directive

    EC published the EU Delegated Regulation 2020/442, which corrects the EU Delegated Regulation 2015/35 that supplements Solvency II Directive (2009/138/EC).

    March 26, 2020 WebPage Regulatory News
    News

    FED and FFIEC Offer Reporting Relief to Institutions Due to COVID-19

    FED and FFIEC announced regulatory reporting relief to financial institutions due to disruptions caused by the COVID-19.

    March 26, 2020 WebPage Regulatory News
    RESULTS 1 - 10 OF 4900