Document ID: chunk:federal_register_of_legislation:F2018L01745:body:0:p1
Version: federal_register_of_legislation:F2018L01745
Segment Type: other
Provision Reference: 
Character Range: 0–3099

Banking, Insurance, Life Insurance, Health Insurance and Superannuation (prudential standard) determination No. 1 of 2018

Prudential Standard CPS 234 Information Security

Banking Act 1959
Insurance Act 1973
Life Insurance Act 1995
Private Health Insurance (Prudential Supervision) Act 2015 Superannuation Industry (Supervision) Act 1993

I, Geoff Summerhayes, delegate of APRA:

    (a)          under subsection 11AF(1) of the Banking Act 1959, DETERMINE Prudential Standard CPS 234 Information Security in the form set out in the Schedule, which applies to all ADIs and authorised banking NOHCs;

    (b)          under subsection 32(1) of the Insurance Act 1973 DETERMINE Prudential Standard CPS 234 Information Security in the form set out in the Schedule, which applies to all general insurers and authorised insurance NOHCs;

    (c)          under subsection 230A(1) of the Life Insurance Act 1995 DETERMINE Prudential Standard CPS 234 Information Security in the form set out in the Schedule, which applies to all life companies, including friendly societies, and registered life NOHCs;

    (d)          under subsection 92(1) of the Private Health Insurance (Prudential Supervision) Act 2015 DETERMINE Prudential Standard CPS 234 Information Security in the form set out in the Schedule, which applies to all private health insurers; and

    (e)          under subsection 34C(1) of the Superannuation Industry (Supervision) Act 1993 DETERMINE Prudential Standard CPS 234 Information Security in the form set out in the Schedule, which applies to all RSE licensees.

This instrument commences on 1 July 2019.

Dated: 30 November 2018

 [Signed]

Geoff Summerhayes
Member

Interpretation

      In this Determination:

ADI has the meaning in section 5 of the Banking Act 1959.

APRA means the Australian Prudential Regulation Authority.

authorised banking NOHC has the meaning given to the expression authorised NOHC in section 5 of the Banking Act 1959.

authorised deposit-taking institution has the meaning given in section 5 of the Banking Act 1959.

authorised insurance NOHC has the meaning given to the expression authorised NOHC in subsection 3(1) of the Insurance Act 1973.

friendly society has the meaning given in section 16C of the Life Insurance Act 1995.

    general insurer has the meaning given in section 11 of the Insurance Act 1973.

    life company has the meaning given in the Schedule to the Life Insurance Act 1995.

private health insurer has the meaning given in section 4 of the Private Health Insurance (Prudential Supervision) Act 2015.

registered life NOHC has the meaning given to the expression registered NOHC in the Schedule to the Life Insurance Act 1995.

RSE licensee has the meaning given in section 10 of the Superannuation Industry (Supervision) Act 1993.

Schedule

Prudential Standard CPS 234 Information Security comprises the document commencing on the following page.

Prudential Standard CPS 234

Information Security
Objectives and key requirements of this Prudential Standard
This Prudential Standard aims to ensure