CPS 230 para 57 Exemption for Attachment-category providers on standardised terms or no formal agreement
New in the July 2026 issue. For a material arrangement, the entity is relieved of paras 53 and 54, limb (d) of para 55 and limbs (a) and (c) of para 59 where both conditions hold: (a) the provider falls within a category in the Attachment; and (b) the arrangement is on standardised terms (terms drawn up by the provider that the entity has no or almost no power to negotiate or change on matters this standard covers) or is not recorded in a formal agreement. Attachment categories, in summary: government agencies (public bodies administering legislation or delivering public functions, but not government business enterprises); regulators (statutory bodies supervising or enforcing compliance in the financial system); central banks; financial market exchanges (licensed market operators under Corporations Act Part 7.2 and equivalently regulated overseas exchanges); operators of clearing and settlement facilities (licensed under Part 7.3 or equivalent overseas, including superannuation clearing houses on the ATO SuperStream Product register); operators of formally recognised payment systems and schemes under an established oversight framework; and financial messaging infrastructures (including SuperStream gateway operators that have signed an application under the Gateway Network Governance Body MoU). Every other requirement keeps applying, including para 52 due diligence, para 55(a) to (c) and para 59(b). Under para 58 APRA can also, by written notice, exempt an arrangement that fails condition (a) or (b) from the same paragraphs.
Source: APRA CPS 230, CPS 230 para 57. The statement above is our statement of the clause, read from the published text and cited so you can check it against the official text, not the instrument verbatim. Open APRA CPS 230 in the compliance library.
Applies to APRA-regulated entities.
These are the artefacts auditors commonly ask for on this requirement, our guidance rather than text from the standard. Your assessor decides what is sufficient in your context, and asks for samples across the period when a report covers one.
system holds itEvidence a system already holds
none for this control
periodic reviewEvidence produced at each review
- Record that the arrangement is on the provider's standardised terms (copy of terms and note of the failed or unavailable negotiation) or that no formal agreement exists · Vendor register / contract repository
governing documentDocuments that govern the control
- Exemption register listing each material arrangement relying on para 57, with the Attachment category claimed and the basis for it (e.g. licence or register reference) · Vendor register / contract repository
- Para 52 due diligence file for each exempt arrangement · Vendor register / contract repository
- Copy of any APRA para 58 written exemption notice and the arrangements it covers · Policy repository / GRC workspace
First move
Common gaps auditors find
- Exemption claimed for a provider outside the Attachment categories (e.g. a government business enterprise)
- Negotiated contracts treated as standardised terms
- Para 52 due diligence or para 59(b) control monitoring dropped for exempt arrangements
Do this for your whole sheet
Paste the rows you run your controls from and get this mapping for every control at once, with the periodic-review ones flagged and a first move per row. No account for the first run.
Build my evidence sheetCPS 230 para 55 Manage the risks of each material arrangement, including BCP execution and orderly exit · CPS 230 para 59 Monitor material arrangements and report to senior management