On 31 October 2025, the Australian Prudential Regulation Authority (APRA) issued a press release stating that it will consult on targeted amendments to CPS 230 Operational Risk Management (CPS 230) by the end of 2025. This follows industry feedback highlighting challenges when applying the new standard’s contractual obligations to arrangements with non-traditional service providers.

APRA adds that:

• The proposed amendments will clarify its expectations for arrangements with non-traditional service providers, particularly around contract uplift and service level monitoring. All other risk obligations under CPS 230 will remain unchanged.

• It will run an accelerated policy process, including a one-month consultation period, to finalise the targeted changes before 1 July 2026, ensuring a smooth transition and regulatory balance.