This guide explains how APRA Prudential Standard CPS 230 (effective July 1, 2025) strengthens operational resilience by requiring APRA-regulated entities to manage third-party risk through end-to-end practices: identifying and classifying critical suppliers, conducting ongoing risk assessments (including fourth-party dependencies), embedding resilience and incident obligations into contracts, continuously monitoring supplier posture, testing business continuity and cyber readiness, maintaining centralized documentation, and reporting TPRM status to senior leadership and the board. It maps these obligations to SecurityScorecard capabilities such as automatic vendor detection, ratings, compliance validation, evidence/document management, rule-based alerts, action plans, and board-ready repor

Join for free to read