APRA CPS 234
APRA CPS 234 Information Security. AI systems hold sensitive data, and agents reach tools through identities and keys, so they sit squarely in scope.
CPS 234 has applied since 1 July 2019.
| The rule asks you to | For AI | In CognaOne |
|---|---|---|
| Keep capability in line with threats | Track threats specific to AI, such as prompt injection and data leakage | Threats catalogued against OWASP and MITRE ATLAS |
| Classify information assets | Know what data each AI system and vendor model touches | Data sensitivity in each risk assessment |
| Implement and test controls | Least privilege for agents, and tests that prove it | Tool and MCP permissions, enforced at runtime and tested |
| Notify APRA of material incidents within 72 hours, and of control weaknesses that cannot be fixed in time within 10 business days | AI incidents run on the same clock as any other | The affected system, its owners and controls known at once |
24 controls in the registry. APRA CPS 234
This page is general information, not legal advice. Sources checked October 2026.
Last reviewed October 2026Suggest a change