Featured Product

    APRA Proposes Amendments to CPG 234 Related to Information Security

    March 25, 2019

    APRA is proposing the cross-industry Prudential Practice Guide 234 Information Security (CPG 234), which will replace the existing CPG 234 Management of Security Risk in Information and Information Technology. Comments are requested by May 17, 2019.

    APRA released, in November 2018, a new Prudential Standard CPS 234 Information Security (CPS 234) that applies to all APRA-regulated entities from July 01, 2019. When releasing CPS 234, APRA noted that it would consult on an updated CPG 234. The CPG 234 is designed to assist regulated entities in complying with CPS 234 on an ongoing basis and conveys observations of APRA on what constitutes good practice in information security. The key matters covered in the updated draft CPG 234 include the following:

    • Guidance on information asset identification and classification
    • Details to assist APRA-regulated entities when notifying APRA of information security incidents and information control weaknesses, as required under CPS 234
    • Various matters for which APRA, through its ongoing supervision, has identified deficiencies in the practices of regulated entities

    The guide is aimed at boards and senior management as well as risk and information technology experts within regulated entities. It outlines how entities can maintain information security capabilities commensurate with the size and complexity of their business and the sensitivity of the data they possess. It also explains how entities can optimize their resilience when aspects of their information security are managed by third parties.

     

    Related Links

    Comment Due Date: May 17, 2019

    Keywords: Asia Pacific, Australia, Banking, Insurance, CPS 234, CPG 234, Information Security, APRA

    Related Articles
    News

    APRA Finalizes Reporting Standard for Operational Risk Requirements

    APRA finalized the reporting standard ARS 115.0 on capital adequacy with respect to the standardized measurement approach to operational risk for authorized deposit-taking institutions in Australia.

    March 03, 2021 WebPage Regulatory News
    News

    ECB Publishes Guide for Determining Penalties for Regulatory Breaches

    ECB published a guide that outlines the principles and methods for calculating the penalties for regulatory breaches of prudential requirements by banks.

    March 02, 2021 WebPage Regulatory News
    News

    MAS Sets Out Good Practices to Manage Operational Risks Amid COVID

    MAS and The Association of Banks in Singapore (ABS) jointly issued a paper that sets out good practices for the management of operational and other risks stemming from new work arrangements adopted by financial institutions amid the COVID-19 pandemic.

    March 02, 2021 WebPage Regulatory News
    News

    ACPR Announces New Data Collection Application for Banks and Insurers

    ACPR announced that a new data collection application, called DLPP (Datalake for Prudential), for collecting banking and insurance prudential data will go into production on April 12, 2021.

    March 02, 2021 WebPage Regulatory News
    News

    BCB Maintains CCyB at 0%, Initiates First Cycle of Regulatory Sandbox

    BCB announced that the Financial Stability Committee decided to maintain the countercyclical capital buffer (CCyB) for Brazil at 0%, at least until the end of 2021.

    March 02, 2021 WebPage Regulatory News
    News

    EBA Consults on Pillar 3 Disclosure Standards for ESG Risks Under CRR

    EBA is consulting on the implementing technical standards for Pillar 3 disclosures on environmental, social, and governance (ESG) risks, as set out in requirements under Article 449a of the Capital Requirements Regulation (CRR).

    March 01, 2021 WebPage Regulatory News
    News

    ESAs Issue Advice on KPIs on Sustainability for Nonfinancial Reporting

    ESAs Issue Advice on KPIs on Sustainability for Nonfinancial Reporting

    March 01, 2021 WebPage Regulatory News
    News

    EIOPA Launches Study on Non-Life Underwriting Risk in Internal Models

    EIOPA has launched a European-wide comparative study on non-life underwriting risk in internal models, also kicking-off of the data collection phase.

    March 01, 2021 WebPage Regulatory News
    News

    SRB Publishes Overview of Resolution Tools Available in Banking Union

    SRB published an overview of the resolution tools available in the Banking Union and their impact on a bank’s ability to maintain continuity of access to financial market infrastructure services in resolution.

    March 01, 2021 WebPage Regulatory News
    News

    EU Amends CRD4 and CRD5 as Part of Capital Markets Recovery Package

    EU published Directive 2021/338, which amends the Markets in Financial Instruments Directive (MiFID) II and the Capital Requirements Directives (CRD 4 and 5) to facilitate recovery from the COVID-19 crisis.

    February 26, 2021 WebPage Regulatory News
    RESULTS 1 - 10 OF 6650