The grace period ends in July
CPS 234 is active. CPS 230 already requires 24-hour notification when a critical operation moves outside tolerance. You are liable for 72-hour reporting today. By July 2026, your entire operational resilience framework must be audit-ready.
The cost of downtime is rising
The regulatory landscape has shifted. Under APRA, Boards are now ultimately accountable for operational risk. The “tick-box” approach is now a personal liability.
The enforcement roadmap
Key dates for Australian financial services compliance
Regulation to resolution
How PagerDuty supports your APRA and Australian regulatory obligations.
24-hour disruption reporting
Regulation: CPS 230 (business continuity)
Fix: Incident acceleration
Capture and escalate disruptions to critical operations in real time. When incidents move outside board-approved tolerance levels, workflows trigger immediately to support APRA notification within the mandatory 24-hour window.
Registered critical operations
Regulation: CPS 230 (critical operations & BCP)
Fix: Automated continuity execution
Support your register of critical operations with event-driven runbooks that trigger predefined recovery actions within approved tolerance thresholds.
Tolerance monitoring
Regulation: CPS 230 (tolerance levels)
Fix: Proactive escalation
Track disruption duration and severity against board-defined tolerance thresholds. Escalate before limits are breached to reduce regulatory exposure and operational risk.
Beat the 72-hour clock
Regulation: CPS 234 & SOCI (notification obligations)
Fix: Intelligent triage and routing
Surface the right incidents fast. Intelligent routing ensures operational and security events are escalated quickly, supporting 72-hour APRA notification and 12-hour SOCI reporting.
Audit-ready evidence
Regulation: CPS 230 & FAR (governance & accountability)
Fix: Automated operational timeline capture
Every alert, incident, escalation and action is time-stamped and attributable. Generate defensible evidence to support board oversight, APRA review and accountable person obligations under FAR.
APRA readiness toolkit
Technical guides and intelligence reports for your compliance journey.
July 1, 2026 is non-negotiable
Your spreadsheets won't survive the audit. Secure your operational resilience today.