Finance, Director, CIO
APRA CPS 230
8 min read
APRA CPS 230 and AI: what financial services firms need to build
GP
Guru Prasad, Founder, AAAI. Published 5 October 2026.
APRA's Prudential Standard CPS 230 Operational Risk Management has applied to banks, insurers and superannuation trustees since 1 July 2025, and it does not mention AI. It does not need to. Any AI system that supports a critical operation, or depends on an external model or platform, sits inside CPS 230's requirements for critical operations, tolerance levels and material service providers. APRA's 30 April 2026 letter to industry confirms it is looking for exactly that, and found governance lagging adoption.
In brief
- CPS 230 is technology neutral: AI is covered because it is technology, data and, usually, a third-party service, not because the standard names it.
- APRA's 30 April 2026 letter to industry found AI governance has not matured at the pace of adoption, and flagged board literacy, supplier concentration and opaque upstream dependencies.
- The practical build is four things: an AI inventory tied to your critical operations register, tolerance and fallback plans for AI dependence, material service provider treatment for AI suppliers, and board reporting that can withstand challenge.
Plain English
"Critical operation" is CPS 230's term for a process whose disruption beyond the entity's tolerance would materially affect its customers or its role in the financial system, such as payments, claims processing, investment management or customer enquiries. A "tolerance level" is the limit you set for each one: how long it can be disrupted, how much data loss is acceptable, and the minimum service level while you run on alternative arrangements.
A "material service provider" is a third party you rely on to perform a critical operation, or whose failure exposes you to material operational risk. For AI, that often means the vendor behind a credit decisioning model, a claims triage tool or an embedded generative AI feature, and possibly the foundation model supplier behind it. See also Australia's Guidance for AI Adoption for the voluntary practices that sit alongside this binding standard.
Australian context
CPS 230 applies to authorised deposit-taking institutions, general insurers, life companies, private health insurers and registrable superannuation entity licensees. It commenced on 1 July 2025. For service provider contracts already in place on that date, the contract requirements apply from the earlier of the next renewal or 1 July 2026, so that transition date has now passed. The standard makes the board ultimately accountable for oversight of operational risk, including business continuity and service provider management.
On 30 April 2026, APRA wrote to all regulated entities on AI and issued a media release. It reported that governance had not kept pace with adoption, that some entities depend on a single provider for multiple AI capabilities with limited contingency planning, and that upstream dependencies through foundation models and training data are opaque. It set expectations on board literacy, an inventory of AI tools and use cases, human involvement in high-risk decisions, credible fallback processes, mapping of third and fourth-party dependencies, and monitoring for model drift. APRA said it was not imposing new requirements at that point. The letter does not cite CPS 230 paragraph by paragraph, so the mapping in this post is AAAI's reading of how the two fit together.
Sources: APRA, Prudential Standard CPS 230 Operational Risk Management; APRA, Operational Risk Management response paper, 11 July 2023; APRA, Letter to Industry on Artificial Intelligence, 30 April 2026; APRA media release, 30 April 2026.
The risk and the opportunity
The exposure is not exotic. A bank that adopted a vendor's AI model for credit assessment, an insurer routing claims through an AI triage tool, or a super fund using AI in member communications has probably added a critical dependency without it passing through the process CPS 230 expects: classification against the critical operations register, a tolerance level, a tested fallback, and a place on the material service provider register. APRA's finding that entities lean on one provider for several AI capabilities is the same concentration problem CPS 230 already asks you to manage, now arriving through a side door.
The opportunity is that CPS 230 gives you a ready structure. You do not need a separate AI compliance regime to satisfy APRA. You need your existing operational risk framework to see AI properly. Firms that already run a disciplined critical operations register and a tested business continuity plan can extend it to AI with modest effort, and can answer APRA's likely questions with documents they already maintain. Firms that treat AI as an innovation project outside operational risk will be rebuilding under supervisory attention.
What to build
An AI inventory linked to the critical operations registerList every AI tool and use case, including embedded vendor features and unapproved staff use, then record which critical operation each one supports. Anything with no link to a critical operation is lower risk. Anything with a link is in scope.
Tolerance levels and a fallback for each AI-dependent operationDecide how long the operation can run without the model, what happens to data if it fails or drifts, and what manual or alternative process takes over. Test the fallback in your severe but plausible scenario exercises, not just on paper.
Material service provider treatment for AI suppliersClassify AI vendors against the material service provider test, register them, and check contracts for audit access, sub-contractor notification, data ownership, termination rights and APRA access. Map the foundation model and data sources behind the vendor, and write down a plausible substitution scenario.
Board reporting that supports real challengeGive the board a short, regular view of AI use against critical operations, supplier concentration, monitoring triggers and incidents. Include defined triggers for action when model performance deviates, and make sure directors have enough technical grounding to question the answers.
What this means for you
Practitioners: risk, compliance, procurement and technology professionals
You are the people who can tell whether an AI tool is quietly supporting a critical operation, and whether its contract says what CPS 230 expects. Most gaps will show up in vendor terms and in features switched on inside existing products.
Do this: pick the three AI tools closest to customers or payments, and check each against the critical operations register and the material service provider register this month.
Directors and delivery leads
The board is accountable under CPS 230 and APRA has said boards need enough technical literacy to challenge. Delivery leads own the evidence that the fallback and tolerance arrangements actually work.
Do this: ask management for the AI inventory mapped to critical operations, and for the date the AI fallbacks were last tested.
CIOs and CEOs
Supplier concentration is the issue APRA singled out, and it is a decision you make through architecture and procurement long before it becomes a supervisory finding.
Do this: ask where one AI provider underpins more than one critical operation, and what your plausible substitution plan is if that provider fails.
Frequently asked
Does CPS 230 mention artificial intelligence?
No. CPS 230 is technology neutral and does not use the term AI. It applies to AI because AI systems are technology, data and often third-party services that support critical operations. APRA's 30 April 2026 letter to industry on AI sets out how it expects regulated entities to govern AI within existing prudential requirements.
Is a foundation model provider a material service provider under CPS 230?
It can be. CPS 230 treats a service provider as material where it is relied on to perform a critical operation or exposes the entity to material operational risk. If an AI model or platform supports credit assessment, claims, underwriting or fund administration, the provider is likely to meet that test and belong on the material service provider register. The classification is the entity's judgement, and it must be able to defend it to APRA.
When do the CPS 230 service provider requirements apply to existing contracts?
CPS 230 commenced on 1 July 2025. For contracts that existed at that date, the contract requirements apply from the earlier of the next renewal date or 1 July 2026. That transition date has now passed, so existing AI-related contracts should already meet the standard.
Extending operational risk management to AI is applied governance work, and it is the core of what AAAI's certifications teach for Australian financial services. If your team is starting to map where AI touches critical operations, the AI Core financial services track is the place to begin. If you are the person who will lead this formally, CAIS: Certified AI Strategist goes deeper.
Explore AI Core
Explore CAIS
