Banks, APRA-regulated, government & rail

APRA CPS 230 & CPS 234

CPS 230 makes operational resilience a board-owned obligation and CPS 234 asks for an information-security posture you can defend line by line — each obligation needs evidence, not an assertion, and the provider-facing ones must be evidenced through your suppliers. Most teams still answer with a spreadsheet assembled the week before the review.

Customers work in their own workspace at banking.cybersentien.com, prepared when the subscription starts. The try-out runs on sample data.

Operational resilience · information security · obligation self-assessment

What you get

A standalone CPS 230 / CPS 234 console: the entity self-assesses the curated obligation set with evidence, and — for the obligations that flow down to material providers — sees which providers already evidence them (prove-once). Never a false green.

Defensible accuracy, with less consultant overhead.

Frameworks covered

Each framework links to its own page.

What it covers today

The curated CPS 230 (operational risk) and CPS 234 (information security) obligation sets, self-assessed with evidence and by-theme rollups, plus flow-down conformance recorded once on a material provider and consumed toward the entity's obligation. CyberSentien is the evidence layer; it does not replace an APRA-appointed reviewer, and nothing shows green without evidence.

Pricing

Enterprise from $64,467 / yr, scoped with you.

See all pricing →

Your workspace

Try it on the shared demo today. For a subscription, the deployment model, tenancy and data boundary are agreed with you before purchase, and your evidence is hosted in Australia.

See it working

Open the console on sample documents now, or tell us where you sit and we'll send a personal demo link for your own evidence.

Try it on sample documents →Request a demo