APRA CPS 220 Risk Management
What is APRA CPS 220 Risk Management?
Australian Prudential Regulation Authority Prudential Standard CPS 220 sets out requirements for APRA-regulated entities to have an effective risk management framework, including the Board's responsibility for risk oversight, a Chief Risk Officer, and the 'three lines of defence' model. Applies to ADIs, insurers, and RSE licensees.. It comprises 23 controls organised across 22 domains, and applies in Australia.
How APRA CPS 220 Risk Management maps to other frameworks
All 23 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 22 domains APRA CPS 220 Risk Management groups its controls into
Frameworks that share controls with APRA CPS 220 Risk Management
Each of these has at least one control mapped to a control in APRA CPS 220 Risk Management. The number is how many APRA CPS 220 Risk Management controls are shared, counted from the mapping graph.
Implementation guides for frameworks that overlap APRA CPS 220 Risk Management
Where APRA CPS 220 Risk Management overlaps with the standards you already hold
What APRA CPS 220 Risk Management means in your sector
What APRA CPS 220 Risk Management means for your job
Questions people ask about APRA CPS 220 Risk Management
What is APRA CPS 220 Risk Management?
How many controls does APRA CPS 220 Risk Management have?
Where does APRA CPS 220 Risk Management apply?
What frameworks does APRA CPS 220 Risk Management map to?
How do I get started with APRA CPS 220 Risk Management compliance?
Query APRA CPS 220 Risk Management programmatically
APRA CPS 220 Risk Management, its 23 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
APRA CPS 220 Risk Management API reference and MCP config →What APRA CPS 220 Risk Management requires, control by control
Each page carries the requirement text for one APRA CPS 220 Risk Management control and what an assessor expects to see as evidence.
- CPS-220-PARA-12 Identification of Group Derived Framework Elements
- CPS-220-PARA-17 Group Liquidity Management Policy
- CPS-220-PARA-18 Group Framework Coverage of Non Regulated Group Entities
- CPS-220-PARA-19 Maintenance of a Risk Management Framework
- CPS-220-PARA-21 Consistency of the Framework with the Business Plan
- CPS-220-PARA-22 Framework Structure for Managing Each Material Risk
- CPS-220-PARA-23 Minimum Contents of the Risk Management Framework
- CPS-220-PARA-24 Scenario Analysis and Stress Testing Programs
- CPS-220-PARA-25 Management Information System and Data Framework
- CPS-220-PARA-26 Material Risk Categories the Framework Must Address
How much of another standard APRA CPS 220 Risk Management already covers
Each crosswalk is judged control by control, and the mappings that were rejected are kept alongside the ones that held.
How ready are you for APRA CPS 220 Risk Management?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.