APRA’s CPS 230 & CPS 234: Strengthening Operational & Cyber Resilience

In this episode of Don't Be A Sitting Duck, we unpack APRA’s latest regulatory updates: CPS 230 on Operational Risk Management and CPS 234 on Information Security. With CPS 230 set to take effect in July 2025, organizations must prepare for stronger risk management, business continuity, and third-party oversight—especially in cloud outsourcing. Plus, we break down CPS 234, which mandates strict cybersecurity controls, risk assessments, and incident response requirements for financial institutions. Get ahead of compliance and fortify your organisation’s resilience—this is one episode you can’t afford to miss! Resources & Next Steps: Check out the show notes and other cybersecurity insights at sittingduck.com.au/podcast Book your free Empower Systems Assessment at nationalpc.com.au/empower Until next time—stay safe, stay informed, and don’t be a sitting duck!