APRA’s CPS 230 & CPS 234: Strengthening Operational & Cyber Resilience

02/25/25 • 4 min

In this episode of Don't Be A Sitting Duck, we unpack APRA’s latest regulatory updates: CPS 230 on Operational Risk Management and CPS 234 on Information Security. With CPS 230 set to take effect in July 2025, organizations must prepare for stronger risk management, business continuity, and third-party oversight—especially in cloud outsourcing. Plus, we break down CPS 234, which mandates strict cybersecurity controls, risk assessments, and incident response requirements for financial institutions. Get ahead of compliance and fortify your organisation’s resilience—this is one episode you can’t afford to miss! Resources & Next Steps: Check out the show notes and other cybersecurity insights at sittingduck.com.au/podcast Book your free Empower Systems Assessment at nationalpc.com.au/empower Until next time—stay safe, stay informed, and don’t be a sitting duck!

Previous Episode

Lazarus Group’s $21M Crypto Heist & Australian IVF Data Breach

Cybercriminals are relentless, and this week’s stories prove just how high the stakes are. North Korea’s Lazarus Group Strikes Again: The notorious state-backed hacking group has pulled off another major crypto heist, stealing $21 million in Ethereum from the Bybit exchange. But how did they do it, and what does this mean for the future of cryptocurrency security? Australian IVF Data Breach: A major Australian fertility clinic has suffered a devastating data breach, potentially exposing highly sensitive patient records. With medical data being one of the most valuable assets on the dark web, what risks do patients now face? In this episode, we break down how these attacks happened, why they matter, and what businesses should do next to protect themselves. Whether you're in crypto, healthcare, or any industry handling sensitive data, these lessons apply to you. Stay informed. Stay secure. Tune in now to uncover these crucial cybersecurity insights. Resources & Next Steps: Check out the show notes and other cybersecurity insights at sittingduck.com.au/podcast Book your free Empower Systems Assessment at nationalpc.com.au/empower Until next time—stay safe, stay informed, and don’t be a sitting duck!