APRA Prudential Standard CPS 234 — Information Security (Australia)
What is APRA Prudential Standard CPS 234 — Information Security (Australia)?
APRA Prudential Standard CPS 234 (effective July 2019) establishes information security requirements for APRA-regulated entities in Australia: authorised deposit-taking institutions (banks), general insurers, life insurance companies, private health insurers, and registrable superannuation entity (RSE) licensees. CPS 234 requires entities to maintain an information security capability commensurate with the size and extent of threats to their information assets. It comprises 19 controls organised across 5 domains, and applies in Australia (APRA).
How APRA Prudential Standard CPS 234 — Information Security (Australia) maps to other frameworks
All 19 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 5 domains APRA Prudential Standard CPS 234 — Information Security (Australia) groups its controls into
Where APRA Prudential Standard CPS 234 — Information Security (Australia) overlaps with the standards you already hold
Where to get trained on APRA Prudential Standard CPS 234 — Information Security (Australia)
4 courses in the catalogue cover APRA Prudential Standard CPS 234 — Information Security (Australia) directly. Each is self-paced, includes the downloadable toolkit and the implementation playbook, and carries a certificate of completion.
What APRA Prudential Standard CPS 234 — Information Security (Australia) means in your sector
What APRA Prudential Standard CPS 234 — Information Security (Australia) means for your job
Questions people ask about APRA Prudential Standard CPS 234 — Information Security (Australia)
What is APRA Prudential Standard CPS 234?
How many controls does APRA Prudential Standard CPS 234 have?
Where does APRA Prudential Standard CPS 234 apply?
What frameworks does APRA Prudential Standard CPS 234 map to?
How do I get started with APRA Prudential Standard CPS 234 compliance?
Query APRA Prudential Standard CPS 234 — Information Security (Australia) programmatically
APRA Prudential Standard CPS 234 — Information Security (Australia), its 19 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
APRA Prudential Standard CPS 234 — Information Security (Australia) API reference and MCP config →What APRA Prudential Standard CPS 234 — Information Security (Australia) requires, control by control
Each page carries the requirement text for one APRA Prudential Standard CPS 234 — Information Security (Australia) control and what an assessor expects to see as evidence.
- CPS-234-PARA-13 Board Responsibility for Information Security
- CPS-234-PARA-14 Definition of Information Security Roles and Responsibilities
- CPS-234-PARA-15 Information Security Capability
- CPS-234-PARA-16 Assessment of Related Party and Third Party Capability
- CPS-234-PARA-17 Active Maintenance of Capability Against Change
- CPS-234-PARA-18 Information Security Policy Framework
- CPS-234-PARA-19 Policy Direction to All Responsible Parties
- CPS-234-PARA-20 Information Asset Classification
- CPS-234-PARA-21 Implementation of Information Security Controls
- CPS-234-PARA-22 Evaluation of Third Party Control Design
How much of another standard APRA Prudential Standard CPS 234 — Information Security (Australia) already covers
Each crosswalk is judged control by control, and the mappings that were rejected are kept alongside the ones that held.
- APRA CPS 234 to APRA CPS 230 Operational Risk Management crosswalk
- APRA CPS 234 to C5 (Germany) crosswalk
- APRA CPS 234 to CIS Controls v8 crosswalk
- APRA CPS 234 to Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 crosswalk
- APRA CPS 234 to FedRAMP Moderate crosswalk
- APRA CPS 234 to HIPAA Security Rule crosswalk
- APRA CPS 234 to ISO 27001:2022 crosswalk
- APRA CPS 234 to ISO 27002:2022 crosswalk
How ready are you for APRA Prudential Standard CPS 234 — Information Security (Australia)?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.