Framework library · Australia

APRA CPS 234

APRA CPS 234 — Information Security. Published by APRA, version 2019. Kapālins maps it at category level: the assessment’s 5 AI-risk areas, each tied to this framework, rather than clause by clause. 3 of 5 risk areas are proved by a live signal from the platform, and 2 by the assessment.

Read the source document

Risk areas mapped
LLM Security controlsLive signal
Agentic AI Risk controlsAssessment
AI Privacy & Data Governance controlsLive signal
Model Integrity & Supply Chain controlsAssessment
AI Governance & Risk Management controlsLive signal

Live signal: a signal from the gateway, probes or device sensor proves it continuously. Assessment: it is evidenced by answers to the assessment. Both are exported in the regulator evidence pack.

History

How APRA CPS 234 got here.

  1. Proposed

    APRA released draft CPS 234 and a discussion paper for consultation. APRA

  2. Adopted

    APRA released the final Prudential Standard CPS 234 Information Security. APRA

  3. Guidance

    APRA finalised updated Prudential Practice Guide CPG 234 Information Security. APRA

  4. In force

    CPS 234 commenced for all APRA-regulated entities. APRA

  5. In force

    Latest date for CPS 234 to apply to information assets managed by third parties, unless contracts renewed earlier. APRA