.
Webinar Q&A: CPS 230 Post-Implementation: Embedding Operational Risk, Controls and Accountability
.
With APRA Prudential Standard CPS 230 Operational Risk Management now largely implemented, APRA-regulated entities have moved beyond design and uplift programs into the far more challenging phase – demonstrating effective operation in practice.
This webinar will focus on what post-implementation success looks like under CPS 230 and how Boards, Audit and Risk Committees and executives can gain confidence that operational risk frameworks are not merely documented — but embedded, tested and defensible.
This session features an interactive Q&A format where Julian Fenwick, CEO and Founder of GRC Solutions, will facilitate a deep dive into the practicalities of maintaining a robust CPS 230 framework.
Webinar Details
- Date: Thursday, 23 April 2026
- Time: 12:00 – 1:00pm (AEST)
- Webinar: Email confirmation and Zoom link provided on registration.
- CPD Points Available.
- Complimentary webinar.
.
APRA’s supervisory focus is now shifting from design adequacy to effectiveness in operation. Post-implementation questions Boards and Audit and Risk Committee should now be asking include:
- Is the framework operating as intended?
- Are tolerances meaningful and linked to risk appetite?
- Are incidents being captured and escalated appropriately?
- Is service provider oversight genuinely robust?
- Can we evidence control effectiveness?
.
Key Themes Covered
The key themes of the webinar will include:
- Moving from implementation to demonstrable effectiveness
- Critical operations – Are they defensible?
- Service provider oversight in practice
- Controls, Incidents and Root Cause Analysis; and
- Three Lines of Defence under CPS 230.
.
Contact Us
For more information, please liaise with your Senior Relationship Manager or email contactus@grc-solutions.com

