practitioner au-compliance resilience supply-chain
APRA CPS 230: operational resilience, critical operations and the 24-hour, 72-hour and 20-day notices
CPS 230 is APRA's operational risk standard for banks, insurers, private health insurers and super trustees. It asks each entity to name its critical operations, set how long and how badly each may be disrupted, prove it can stay inside those limits through a severe disruption, and manage the suppliers it depends on. Here is what it requires, the three notices it creates, and how it sits beside CPS 234.