Skip to main content
235

Managing Data Risk

CPG
235
Guidance (1)
Status: Current
September 2013
This PPG aims to assist regulated entities in managing data risk. It is designed to provide guidance to senior management, risk management and technical specialists (both management and operational). The PPG targets areas where APRA continues to identify weaknesses as part of its ongoing supervisory activities. The PPG does not seek to provide an allencompassing framework, or to replace or endorse existing industry standards and guidelines.  |  File type: PDF  |  File size: 328.44 KB
234

Information Security

CPS
234
CPG
234
Prudential Standards (1)
Status: In force
In effect from 1 July 2019
This Prudential Standard aims to ensure that an APRA-regulated entity takes measures to be resilient against information security incidents (including cyber-attacks) by maintaining an information security capability commensurate with information security vulnerabilities and threats.
Guidance (1)
Status: Current
June 2019
This PPG aims to assist regulated entities in maintaining information security. It is designed to provide guidance to Boards, senior management, risk management and information security specialists (management and operational).  |  File type: PDF  |  File size: 837.05 KB
Related resources (2)
222

Intra-group Transactions and Exposures

3PS
222
3PG
222
Prudential Standards (1)
Status: In force
In effect from 1 July 2017
This Prudential Standard requires a Level 3 Head to ensure that associations and dealings within the Level 3 group do not expose prudentially regulated institutions within the group to excessive risk.
Guidance (1)
Status: Current
July 2017
Prudential Standard 3PS 222 Intra-group Transactions and Exposures (3PS 222) sets out APRA’s requirements in relation to the associations and dealings between institutions in a Level 3 group. This PPG aims to assist Level 3 Heads to comply with those requirements and, more generally, to outline prudent practices in relation to certain intra-group matters.  |  File type: PDF  |  File size: 505.33 KB
220

Risk Management

CPS
220
CPG
220
Prudential Standards (1)
Status: In force
In effect from 1 July 2019
This Prudential Standard requires an APRA-regulated institution and a Head of a group to have systems for identifying, measuring, evaluating, monitoring, reporting, and controlling or mitigating material risks that may affect its ability, or the ability of the group it heads, to meet its obligations to depositors and/or policyholders. These systems, together with the structures, policies, processes and people supporting them, comprise an institution’s or group’s risk management framework.
Guidance (1)
Status: Current
April 2018
This PPG aims to assist APRA-regulated institutions in complying with Prudential Standard CPS 220 Risk Management (CPS 220) and, more generally, to outline prudent practices in relation to risk management.  |  File type: PDF  |  File size: 675.49 KB
230

Commercial Property

ARS
230.0
Reporting Standards (1)
Status: In force
Effective from 23 February 2022
This Reporting Standard is made under section 13 of the Financial Sector (Collection of Data) Act 2001 and outlines the overall requirements for the provision of information to APRA relating to an authorised deposit-taking institution’s commercial property.
222

Associations with Related Entities

APS
222
ARS
222.0
ARS
222.2
Prudential Standards (1)
Status: In force
In effect from 1 January 2022
This Prudential Standard requires that authorised deposit-taking institutions identify, monitor and control contagion risks arising from their associations and dealings with related entities and those creating step-in risk.
Reporting Standards (2)
Status: In force
In effect from 1 January 2022
This Reporting Standard sets out requirements for the provision of information to APRA relating to an authorised deposit-taking institution’s exposures to related entities.
Status: In force
In effect from 1 January 2022
This Reporting Standard sets out requirements for the provision of information to APRA relating to an authorised deposit-taking institution’s exposures to step-in risk entities.
Subscribe to Risk management