APRA Consults on Prudential Standard for Operational Risk
The Australian Prudential Regulation Authority (APRA) is seeking comments, until October 21, 2022, on the introduction of CPS 230, which is the new cross-industry prudential standard on operational risk management. APRA also issued a letter and finalized the minor amendments to align and centralize the definition of a significant financial institution within the prudential framework, along with the associated prudential standards. APRA will continue to explore the scope for enhancing proportionality in the prudential framework and publish a list of significant financial institutions for all industries on its website in late 2022. In another statement, APRA announced that the neobank Volt Bank has successfully completed the process of returning deposits to its customers, post its June 29 decision to cease being a bank and hand back its authorized deposit-taking institution license to APRA.
The proposed prudential standard CPS 230 sets out minimum standards for operational risk controls and monitoring, business continuity planning, and the management of third-party service providers. The proposed standard will replace and supersede five existing standards: CPS 231 on outsourcing, CPS 232 on business continuity management applicable to authorized deposit-taking institutions, life insurers and general insurers, the equivalent standards SPS 231 on outsourcing and SPS 232 on business continuity management for superannuation entities, and the HPS 231 on outsourcing for private health insurers. The proposed standard ensures that an APRA-regulated entity must effectively manage its operational risks, maintain its critical operations through disruptions, and manage the risks arising from service providers. The proposed standard aims to:
- strengthen operational risk management with new requirements to address weaknesses that have been identified in the existing practices of APRA-regulated entities.
- improve business continuity planning to ensure that regulated entities are ready to respond to severe business disruptions, and maintain critical operations such as payments, settlements, fund administration and claims processing.
- enhance third-party risk management by extending requirements to cover all material service providers that regulated entities rely upon for critical operations or that expose them to material operational risk.
APRA expects to release the final CPS 230 early next year, which is well before the new standard comes into force from January 01, 2024.
Related Links
- Press Release on Standard on Outsourcing
- Discussion Paper on Outsourcing Standard
- Draft Standard on Outsourcing (PDF)
- Press Release on Definition of Significant Institution
- Letter on Minor Amendments to Definition (PDF)
- Press Release on Volt Bank
Keywords: Asia Pacific, Australia, Banking, Operational Risk, CPS 230, Outsourcing, Third-Party Risk, Significant Financial Institutions, Volt Bank, Regtech, Basel, Operational Resilience, APRA
Featured Experts
María Cañamero
Skilled market researcher; growth strategist; successful go-to-market campaign developer
Nicolas Degruson
Works with financial institutions, regulatory experts, business analysts, product managers, and software engineers to drive regulatory solutions across the globe.
Patrycja Oleksza
Applies proficiency and knowledge to regulatory capital and reporting analysis and coordinates business and product strategies in the banking technology area
Previous Article
EBA Publishes Multiple Regulatory Updates for Regulated EntitiesRelated Articles
SEC Finalizes Climate-Related Disclosures Rule
The U.S. Securities and Exchange Commission (SEC) has finalized the long-awaited rule that mandates climate-related disclosures for domestic and foreign publicly listed companies in the U.S.
US Regulators Release Stress Test Scenarios for Banks
The U.S. regulators recently released baseline and severely adverse scenarios, along with other details, for stress testing the banks in 2024. The relevant U.S. banking regulators are the Federal Reserve Bank (FED), the Federal Deposit Insurance Corporation (FDIC), and the Office of the Comptroller of the Currency (OCC).
Asian Governments Aim for Interoperability in AI Governance Frameworks
The regulatory landscape for artificial intelligence (AI), including the generative kind, is evolving rapidly, with governments and regulators aiming to address the challenges and opportunities presented by this transformative technology.
EBA Proposes Operational Risk Standards Under Final Basel III Package
The European Union (EU) has been working on the final elements of Basel III standards, with endorsement of the Banking Package and the publication of the European Banking Authority (EBA) roadmap on Basel III implementation in December 2023.
EFRAG Proposes XBRL Taxonomy and Standard for Listed SMEs Under ESRS
The European Financial Reporting Advisory Group (EFRAG), which plays a crucial role in shaping corporate reporting standards in European Union (EU), is seeking comments, until May 21, 2024, on the Exposure Draft ESRS for listed SMEs.
ECB to Expand Climate Change Work in 2024-2025
Banking regulators worldwide are increasingly focusing on addressing, monitoring, and supervising the institutions' exposure to climate and environmental risks.
BIS Bulletin Examines Cognitive Limits of Large Language Models
The use cases of generative AI in the banking sector are evolving fast, with many institutions adopting the technology to enhance customer service and operational efficiency.
ECB is Conducting First Cyber Risk Stress Test for Banks
As part of the increasing regulatory focus on operational resilience, cyber risk stress testing is also becoming a crucial aspect of ensuring bank resilience in the face of cyber threats.
EBA Continues Momentum Toward Strengthening Prudential Rules for Banks
A few years down the road from the last global financial crisis, regulators are still issuing rules and monitoring banks to ensure that they comply with the regulations.
EU and UK Agencies Issue Updates on Final Basel III Rules
The European Commission (EC) recently issued an update informing that the European Council and the Parliament have endorsed the Banking Package implementing the final elements of Basel III standards