Amstelveen - Risk, Compliance and Technology

Regulatory Spotlight on AI Risk Management

4 Aug 2026

ASIC and APRA’s Letters to Industry In May 2026, APRA and ASIC issued letters to industry outlining their expectations for the governance, oversight and management of Artificial Intelligence (AI). The communications reflect the increasing regulatory focus on AI adoption across financial services and the associated risks and opportunities. The letters arrive at a time of […]

Read the article

Business Risk and Resilience

CPS 230: Moving from Implementation to Operating Discipline

18 Jun 2026

A new phase of regulatory expectations Since 1 July 2025, APRA‑regulated entities have been implementing CPS 230 Operational Risk Management (the Standard). This has involved identifying critical operations, establishing tolerance levels, uplifting business continuity arrangements, and strengthening service provider governance. The 1 July 2026 milestone marks a shift in expectations. With transition arrangements now complete, […]

Read the article

Audit and Assurance

Internal Audit Focus Areas for 2026

26 Mar 2026

Organisations continue to face heightened regulatory oversight, rapid technological change, and growing expectations around governance, risk management, and operational resilience. Internal Audit plays a critical role in providing assurance that risk and control frameworks are effective and aligned to strategic objectives. The IIA Global Internal Audit Standards (GIAS) raise the bar on risk-based planning, technology […]

Read the article

Audit and Assurance

Strengthening CPS 230 Resilience Through Internal Audit

2 Feb 2026

Since 1 July 2025, APRA’s Prudential Standard CPS 230 Operational Risk Management has been fully enforceable. The standard now shifts the focus from readiness to demonstrating resilience, requiring entities to prove that operational risk frameworks, business continuity plans and service provider arrangements operate effectively in practice. Under CPS 230, Internal Audit has two mandated responsibilities: […]

Read the article

Business Risk and Resilience

Six Months of CPS 230: What does the next phase of resilience look like?

15 Dec 2025

As APRA sharpens its focus on operational risk and organisations continuously embed regulatory requirements, the evolving business continuity landscape has exposed key areas where organisations can evolve to build true operational resilience. CPS 230 Embedment Retrospective It has now been six months since the Australian Prudential Regulatory Authority (APRA) has enforced Prudential Standard (CPS) 230 […]

Read the article

Your partner in navigating Risk, Compliance, and Technology

Amstelveen is a specialist provider of risk, compliance and technology expertise, operating across a range of business sectors.

The Latest

Regulatory Spotlight on AI Risk Management

CPS 230: Moving from Implementation to Operating Discipline

Internal Audit Focus Areas for 2026

Strengthening CPS 230 Resilience Through Internal Audit

Six Months of CPS 230: What does the next phase of resilience look like?

Internal Audit Focus Areas for 2026

Our Services

Six Months of CPS 230: What does the next phase of resilience look like?

A culture of integrity

Lead the way

Honesty, always

Grow together

Make work fun

Your partner in navigating Risk, Compliance, and Technology

Amstelveen is a specialist provider of risk, compliance and technology expertise, operating across a range of business sectors.

The Latest

Regulatory Spotlight on AI Risk Management

CPS 230: Moving from Implementation to Operating Discipline

Internal Audit Focus Areas for 2026

Strengthening CPS 230 Resilience Through Internal Audit

Six Months of CPS 230: What does the next phase of resilience look like?

Internal Audit Focus Areas for 2026

Our Services

Follow us on LinkedIn for the latest industry news and insights

Six Months of CPS 230: What does the next phase of resilience look like?

A culture of integrity

Lead the way

Honesty, always

Grow together

Make work fun