Skip to content
Cyber Horizon
All frameworks

// APAC Standards

APRA CPS 234 Information Security Compliance Software

The Australian Prudential Regulation Authority Prudential Standard CPS 234 requires APRA-regulated entities to maintain information security capability commensurate with threats to their information assets.

Framework at a glance

Short name

APRA CPS 234

Version

2019

Category

APAC Standards

Controls

25

What APRA CPS 234 covers

25 controls across 6 domains — every one tracked, owned and evidenced in Cyber Horizon.

Govern

8 controls
  • CPS-1 Board Responsibility for Information Security
  • CPS-2 Senior Management Accountability
  • CPS-8 Internal Audit
  • CPS-10 Notification to APRA
  • CPS-11 Information Security Policy

Identify

7 controls
  • CPS-3 Information Security Capability
  • CPS-4 Information Asset Identification and Classification
  • CPS-7 Testing Control Effectiveness
  • CPS-9 Third-Party Provider Management
  • CPS-12 Vulnerability Management

Protect

7 controls
  • CPS-5 Implementation of Controls
  • CPS-13 Access Control
  • CPS-14 Cryptography
  • CPS-15 Network Security
  • CPS-18 Physical Security

Respond

1 controls
  • CPS-6 Incident Management

Recover

1 controls
  • CPS-16 Business Continuity and Resilience

Detect

1 controls
  • CPS-17 Logging and Monitoring

How Cyber Horizon automates APRA CPS 234

Every APRA CPS 234 control lives in a shared control library, crosswalked to the other frameworks you run — evidence collected once counts everywhere it applies.

Evidence is collected automatically from your connected tools, with owners, review cadences and gaps tracked continuously instead of at audit time.

Audit packs generate on demand, and the risk register, vendor risk and threat intelligence sit in the same platform — one evidence trail across your whole programme.

Frequently asked questions

What is APRA CPS 234 Information Security?

The Australian Prudential Regulation Authority Prudential Standard CPS 234 requires APRA-regulated entities to maintain information security capability commensurate with threats to their information assets.

How many controls does APRA CPS 234 Information Security have?

APRA CPS 234 Information Security (2019) has 25 controls in Cyber Horizon's catalogue, organised across 6 domains.

How does Cyber Horizon help with APRA CPS 234 Information Security?

Cyber Horizon maps APRA CPS 234 Information Security into a shared control library alongside every other framework you run, so evidence collected once counts towards APRA CPS 234 and everything else it overlaps with. Controls, evidence status and audit packs live in one place, with automated collection from your connected tools.

See APRA CPS 234 mapped to your environment

Start with the free 20-question readiness check — no signup — or get a personal walkthrough of APRA CPS 234 in Cyber Horizon.