💰 APRA CPS 230 & CPS 234 for superannuation trustees
Super trustees outsource administration, custody and investment management — so CPS 230's material service provider oversight is the biggest task, and it is already in force. Fourth-party transparency and evidenced contract clauses are exactly where spreadsheet registers fall over.
Read from the live catalogue at build time — a framework that is not live on the engine never renders here. Depth is badged per framework: consultant-grade only where we go deepest (ISM/IRAP, Essential Eight), Tier-A breadth everywhere else.
Tier-A breadth across the APRA standards: a material service provider register with the required attributes and fourth-party visibility, CPS 234 information-security posture, and a board & regulator pack — all evidence-led. CyberSentien prepares the evidence; it does not replace an APRA-appointed reviewer, and nothing shows green without evidence.
See it on the real engine
Run the frameworks above against synthetic sample documents now, or tell us where you sit and we'll send a gated, revocable demo link.
Yes. RSE licensees (super trustees) are APRA-regulated and have had to meet CPS 230 since it commenced on 1 July 2025, with particular focus on service provider oversight given heavy outsourcing.
What is the super trustee's biggest CPS 230 task?
Material service provider oversight — administration, custody and investment providers must be in the register with evidenced contract clauses and fourth-party transparency.
Does CyberSentien cover CPS 234 for super funds too?
Yes. Trustees assess CPS 234 information security and CPS 230 resilience from one evidence base, reusing shared controls.
CyberSentien