APRA letter on AI
APRA wrote to industry on artificial intelligence on 30 April 2026. Assurance is not keeping pace with adoption, and APRA will step up supervision.
| APRA expects | In CognaOne |
|---|---|
| An owned inventory of AI tools and use cases | AI inventory, use cases and the people register |
| Ownership and accountability across the lifecycle | Owner and accountable executive per system, with lifecycle and history |
| The AI supply chain mapped, fourth parties and concentration included, with exit options | Components, vendors and model providers linked to each system |
| People involved in high-risk decisions | Agent authorisation routes high-risk actions to a named person |
| Risk and security assessment before deployment and through the lifecycle, with monitoring | Screening, reviews, controls and live evidence |
APRA letter to industry on artificial intelligence
This page is general information, not legal advice. Sources checked October 2026.
Last reviewed October 2026Suggest a change