CPS 230

Question 1

What is the name for CPS 230?

Answer 1

Operational Resilience

Question 2

What is CPS 230 focused on?

Answer 2

1. Strengthening Operational Resilience
2. Minimizing impact to customers from disruptions to Critical Operations

Question 3

How does CPS 230 strengthen operational resilience (4 ways)?

Answer 3

1. Identifying COs and minimising impact of disruptions
2. Strengthen management of operational risks
3. Improve BCP (Business Continuity Planning
4. Improve TPRM (Third Party Risk Management)

Question 4

What will CPS 230 replace and operate alongside of?

Answer 4

1. Replace CPS 231 (Outsourcing) and CPS 232 (BCM)
2. Operate alongside of CPS 234 (Information Security)

Question 5

What are our 3 key compliance dates?

Answer 5

• 31 December 2024 - Internal readiness target
• July 2025 - CPS 230 effective date
• July 2026 - All pre-existing Contracts with MSPs to be updated

Question 6

What 3 things was I involved with or around for embedding CPS 230?

Answer 6

1. RMPF updates to include CPS 230 (done by ORM)
2. CO Risk Profiles approved by CO Owners
3. Updated GRACE and NPH to support enhanced data capture, risk management, governance, and reporting.