The Standard introduces and defines a small set of core concepts that drive obligations and decision-making.

• ORFR (operational risk financial resources and target). The central concept is the ORFR target amount, which is the target quantum of financial resources an RSE licensee must determine and maintain to protect beneficiaries from operational risk losses (ORFR target amount and tolerance limit, para 1.1). A tolerance limit is a lower bound; falling below it triggers a replenishment obligation (ORFR target amount and tolerance limit, para 1.2).

• ORFR strategy. The ORFR strategy is the documented plan the RSE licensee must formulate and implement to meet the ORFR. It must cover the ORFR target and tolerance limit, drawdown parameters, how resources will be held and invested, replenishment processes, review processes and wind-up management (ORFR strategy, para 1.1-1.7). The Board must approve the strategy and is accountable for implementation (ORFR strategy, para 2).

• Eligible ORFR resources and form constraints. ORFR resources can be held as operational risk reserves within an RSE or as trustee capital. Operational risk reserves must be separately identifiable from member accounts and other reserves and must be unrestricted and readily available (Access to ORFR financial resources, para 1.1-1.2). ORFR held as trustee capital must be held in a form equivalent to Common Equity Tier 1 capital (Access to ORFR financial resources, para 2).

• Permitted uses. ORFR resources may be used to address operational risks causing beneficiary loss or deprivation of gains, to meet requirements of Prudential Standard CPS 230 including remediation of material weaknesses and maintenance of critical operations during severe disruption, and to reduce a surplus where ORFR resources are materially larger than the ORFR target amount (Use of ORFR financial resources, paras 1.1-1.3).

• Replenishment and governance. When ORFR resources fall below the tolerance limit, the RSE licensee must implement a replenishment plan approved by the Board and replenish within a period and manner that ensures fair treatment of beneficiaries and minimises adverse outcomes (Shortfall management, paras 1-2). The plan must explain causes, per-RSE amounts, funding sources and expected dates to meet the ORFR target (Shortfall management, para 1.1-1.4).

• Supervisory powers and review. APRA may adjust or exclude specific requirements, require an RSE to meet APRA-specified ORFR amounts, and require appointment of external experts whose reports must be paid for by the RSE licensee and provided to APRA along with the Board’s preliminary response within 30 business days (Adjustments and exclusions, para 1; ORFR target amount and tolerance limit, para 3; Review and audit, para 3). APRA’s powers and discretions under the Standard must be exercised in writing (Interpretation, para 1).

These concepts structure the RSE licensee’s capital, liquidity and governance arrangements for operational risk. They combine quantitative (target, tolerance) and qualitative (strategy, governance, review) obligations and allow APRA supervisory intervention on quantum and process.

The Standard applies to all RSE licensees (Application and commencement, para 1). That is the entire population of entities that hold an RSE licence, without further carve-outs stated in the text. APRA, however, is empowered to adjust or exclude specific requirements for a particular RSE licensee or specified sets of RSE licensees (Adjustments and exclusions, para 1). The Board of each RSE licensee has mandatory decision rights under the Standard: approving group policy use (if applicable), approving the ORFR strategy and approving any replenishment plan prior to its implementation (RSE licensees that are part of a group, para 1; ORFR strategy, para 2; Shortfall management, para 2).

Third parties are implicated in a few concrete ways. Where APRA requires an external expert to assess adequacy and effectiveness of the RSE licensee’s approach, the RSE licensee must pay for that expert’s report and make it available to APRA with the Board’s preliminary response within 30 business days (Review and audit, para 3). Where an RSE licensee uses group policies or functions, those group-level policies and functions must be approved by the RSE licensee’s Board and adapted to the RSE’s operations (RSE licensees that are part of a group, para 1).

Beneficiaries are the protected class the Standard expressly aims to shield from operational risk losses; the Standard’s obligations are framed as duties owed to beneficiaries (Operational risk financial requirement, para 1; Shortfall management, para 1). The Standard also references existing prudential requirements in Prudential Standard CPS 230 Operational Risk Management, signalling interaction with entities and processes already operating under that Standard (Use of ORFR financial resources, para 1.2). APRA is the regulator who exercises oversight and discretion, and must give any exercise of power or discretion in writing (Interpretation, para 1; Adjustments and exclusions, para 1; Review and audit, para 3).

Entities within a corporate group that share policies or functions are affected by the requirement that the RSE Board approve and ensure such group policies have appropriate regard to the RSE licensee’s operations; that places responsibility on the RSE Board to scrutinise group arrangements and to adapt or reject them where they are not appropriate (RSE licensees that are part of a group, para 1).

In short, the primary economic actors who pay or decide under the Standard are RSE licensees (costs, resources, reporting), their Boards (strategy and approvals), APRA (supervisory decisions and potential interventions), and external experts when APRA requires their appointment. Beneficiaries are the intended, passive recipients of the protection the Standard aims to deliver.

The Standard imposes a set of affirmative duties and creates supervisory rights for APRA.

Duties on RSE licensees

• Maintain and use financial resources for operational risk: RSE licensees must “maintain, manage and utilise” financial resources to protect beneficiaries from operational risk losses in their business operations (Operational risk financial requirement, para 1). That is a continuous operational obligation.

• Formulate and implement an ORFR strategy: The Board must ensure an ORFR strategy is formulated and given effect. The strategy must set out the ORFR target amount and tolerance limit and explain how these were determined, processes for drawdown and use, approach to holding resources and how prescribed requirements will be met, investment strategy for operational risk reserves, a replenishment plan process, review processes and wind-up management (ORFR strategy, para 1.1-1.7). The Board must approve the ORFR strategy and is accountable for implementation (ORFR strategy, para 2).

• Determine ORFR target amount and tolerance: The licensee must set an ORFR target amount and a tolerance limit below it and determine both on a prudent basis reflecting risk profile, permitted uses, and the RSE licensee’s size, business mix and complexity (ORFR target amount and tolerance limit, para 1-2). Where APRA considers the amounts inadequate, APRA may require compliance with APRA-determined amounts (ORFR target amount and tolerance limit, para 3).

• Restrict uses of ORFR: ORFR financial resources may only be used for the stated purposes: to address beneficiary losses from operational risks, to meet CPS 230 requirements for operational risk management (including remediation and maintenance of critical operations), and to reduce material surplus above the ORFR target (Use of ORFR financial resources, paras 1.1-1.3).

• Maintain eligibility and access criteria: Operational risk reserves must be separately identifiable, unrestricted and readily available; trustee capital must be equivalent to Common Equity Tier 1 capital to be eligible (Access to ORFR financial resources, paras 1.1-1.2).

• Replenish when below tolerance: If ORFR resources fall below the tolerance limit, the licensee must implement a replenishment plan, replenishing within a period and manner that is fair to beneficiaries and minimises adverse outcomes; the plan must explain causes, per-RSE amounts, funding sources and expected dates (Shortfall management, paras 1-4). The Board must approve the replenishment plan prior to implementation (Shortfall management, para 2). APRA may require revisions (Shortfall management, para 3).

• Review and audit: The RSE licensee must review the ORFR target and tolerance at least annually and after a material operational risk incident or material change; report findings to the Board; maintain internal audit procedures and external audit arrangements to ensure adequacy and effectiveness of the ORFR strategy (Review and audit, paras 1-2).

• Notification: The RSE licensee must notify APRA prior to making a material change to the ORFR target amount (Notification requirement, para 1).

Rights and supervisory powers

• APRA may make written adjustments or exclusions to specific requirements for particular RSE licensees or classes of licensees (Adjustments and exclusions, para 1).

• APRA may require an RSE licensee to meet an ORFR target amount or adopt a tolerance limit determined by APRA within a specified time (ORFR target amount and tolerance limit, para 3).

• APRA may require an RSE licensee to appoint an external expert to assess adequacy and effectiveness, with the RSE licensee to pay the cost, and to provide the report and the Board’s preliminary response within 30 business days (Review and audit, para 3).

• Any APRA exercise of power or discretion under the Standard is to be in writing (Interpretation, para 1).

Other governance duties

• If an RSE licensee is part of a corporate group and uses group policies or functions, the Board must approve and ensure appropriate regard to the RSE licensee’s business operations (RSE licensees that are part of a group, para 1).

• If an RSE licensee seeks to rely on a prior APRA discretion under an earlier version of the Standard, it must contact APRA (Previous exercise of discretion, para 1).

These duties allocate decision rights clearly to Boards while preserving APRA supervisory powers to set or revise quantitative requirements and to require independent assessment. Several duties create ongoing compliance and reporting burdens , the inventory of which appears below in the compliance section.

The Prudential Standard itself does not set out criminal penalties, fines, or enforcement mechanisms in express statutory wording within the text provided. However, it creates enforceable supervisory mechanisms and obligations that enable APRA to intervene and require remedial actions:

• APRA’s written discretions and directions. The Standard permits APRA to adjust or exclude specific requirements for particular RSE licensees or classes of RSE licensees (Adjustments and exclusions, para 1). It also permits APRA to require specified ORFR target amounts or tolerance limits to be met within a specified time (ORFR target amount and tolerance limit, para 3). These supervisory powers enable APRA to direct quantitative compliance outcomes.

• APRA’s power to require external assessment. APRA may require appointment of an external expert to assess the RSE licensee’s approach. The RSE licensee must pay for the expert and provide the report with the Board’s preliminary response within 30 business days (Review and audit, para 3). This imposes a cost and tight reporting obligation.

• Board accountability. The Board is made explicitly accountable for approving the ORFR strategy and for ensuring its implementation (ORFR strategy, para 2). The requirement that replenishment plans be Board-approved prior to implementation embeds governance controls that APRA can scrutinise.

• Notification and scope for APRA revision. The RSE licensee must notify APRA before materially changing the ORFR target amount (Notification requirement, para 1). APRA may require revision of replenishment plans if they do not comply with the RSE licensee’s duties and obligations (Shortfall management, para 3).

While this Standard does not itself specify statutory penalties, those supervisory powers are enforceable within APRA’s broader legal remit under the SIS Act. The Standard also requires written exercises of APRA power (Interpretation, para 1), which creates an administrative record that can be used in enforcement or supervisory contexts. Where the RSE licensee fails to comply with the Standard, APRA’s range of remedies and enforcement tools under the SIS Act would be engaged; those remedies and specific sanctions are not set out in the text of this Standard as provided.

The Standard is explicitly made under s 34C of the Superannuation Industry (Supervision) Act 1993 and applies for the purposes of s 52(8)(b) of the SIS Act (Authority, para 1; Application and commencement, para 2). The Standard therefore sits within the prudential framework established by the SIS Act and is intended to have legal effect under that Act’s prudential standard provisions.

The Standard also cross-references Prudential Standard CPS 230 Operational Risk Management (Use of ORFR financial resources, para 1.2). That cross-reference creates a specific operational linkage: ORFR funds may be used to meet the requirements of CPS 230, including remediation of identified material weaknesses and maintenance of critical operations during severe disruption. The Standard therefore operates alongside CPS 230, with ORFR resources framed as a funding mechanism to meet CPS 230 obligations.

The text requires trustee capital held as ORFR to be held in a form equivalent to Common Equity Tier 1 capital (Access to ORFR financial resources, para 2). That requirement references a capital concept used in prudential frameworks, which will interact with other capital rules and definitions that apply to trustee capital under the broader regulatory regime. The Standard does not supply its own detailed definition of Common Equity Tier 1 equivalence; it imposes the equivalence requirement as a condition to eligibility to meet the ORFR target.

APRA’s discretions under the Standard (Adjustments and exclusions, para 1; ORFR target amount and tolerance limit, para 3; Review and audit, para 3) will be exercised against the background of the SIS Act’s supervisory powers. The Standard requires APRA exercises of power or discretion to be in writing (Interpretation, para 1), creating an administrative linkage to the SIS Act’s statutory machinery.

The Standard imposes governance obligations (Board approvals, notifications, audits) that will interact with corporate law duties and trustee duties, insofar as the Board’s accountability overlaps with fiduciary and statutory responsibilities. The text places the Board squarely accountable for approval and implementation of the ORFR strategy and for approving replenishment plans prior to implementation (ORFR strategy, para 2; Shortfall management, para 2), and requires reporting of review findings to the Board (Review and audit, para 1).

Where an RSE licensee is part of a corporate group and uses group policies or functions, the Board must approve and ensure those policies have appropriate regard to the RSE licensee’s business operations (RSE licensees that are part of a group, para 1). That requires reconciliation between group-level arrangements and the RSE’s prudential obligations under this Standard.

The Standard does not expressly amend or displace other laws in the text provided; it operates as a prudential standard under the SIS Act, interacts with CPS 230 by reference, and embeds APRA supervisory powers within its requirements.

The text supplied contains only the current instrument’s making provision and commencement date. It states the Standard is made under s 34C of the SIS Act (Authority, para 1) and that the Standard commences on 1 July 2025 (Application and commencement, para 3). No other amendments, prior versions, replacement history or dates of amendment are provided in the material supplied.

The Standard contains an express procedural requirement about prior APRA discretions: if an RSE licensee seeks to place reliance, for purposes of complying with this Prudential Standard, on an exercise of discretion by APRA made under a previous version of the Prudential Standard, the RSE licensee must contact APRA (Previous exercise of discretion, para 1). That clause implies the existence of prior versions but does not record their content or dates. The Standard itself provides APRA with power to adjust or exclude specific requirements for particular RSE licensees or specified RSE licensees (Adjustments and exclusions, para 1), which provides a route for tailored amendments in application, but no historical amendments are recorded in the supplied text.

For a practitioner needing a full amendment history, the instrument as provided does not contain that history. The only definitive chronological marker in the text is the commencement date, 1 July 2025 (Application and commencement, para 3).

The supplied instrument contains no litigation or judicial history. There are no cases, determinations or tribunal decisions cited or discussed in the text. The Standard does not reference any court decisions or provide any litigation-related notes. It does not set out enforcement penalties beyond supervisory powers, nor does it record past disputes or judicial interpretation. Therefore, based solely on the provided text, there is no litigation history to report.

If litigation or precedent subsequently arises interpreting the Standard, that material is not part of the instrument as supplied and would need to be sourced separately. The Standard’s provisions that reserve discretion to APRA and require written exercises of power (Interpretation, para 1) suggest APRA administrative decisions will generate records that could form the factual basis for any future legal challenge, but no such cases are cited in the Standard itself.

This Standard contains a number of provisions that create practical implementation pitfalls and points of supervisory leverage. The following are specific items to watch, grounded in the text.

• Board approval is mandatory and binding. The ORFR strategy must be approved by the Board and the Board is “ultimately accountable” for ensuring implementation (ORFR strategy, para 2). That places legal and governance responsibility with the Board for design, oversight and execution. Boards need to document approvals and implementation evidence.

• APRA’s discretion is broad and written. APRA can adjust or exclude specific requirements for individual or specified RSE licensees (Adjustments and exclusions, para 1). APRA can also require an RSE to meet an APRA-determined ORFR target or tolerance within a specified time (ORFR target amount and tolerance limit, para 3). Importantly any such exercise of power by APRA must be in writing (Interpretation, para 1). RSE licensees should therefore expect written directions and keep contemporaneous records.

• Eligibility constraints on the form of ORFR resources. ORFR resources held as trustee capital must be in a form “equivalent to Common Equity Tier 1 Capital” to be eligible (Access to ORFR financial resources, para 2). That equivalence requirement limits the forms of capital that can be counted, potentially constraining the use of hybrids or other instruments. The Standard does not define the boundaries of “equivalent”, so there may be judgement and potential APRA intervention about eligibility.

• Liquidity and separability requirements. Operational risk reserves held in the RSE must be separately identifiable from member accounts and other reserves, and must be unrestricted and “readily available” to address operational risks in a timely manner (Access to ORFR financial resources, para 1.1-1.2). Practically, that requires operational systems that segregate balances, and legal arrangements that ensure funds are unencumbered and liquid. Failure to structure reserves correctly can render them ineligible.

• Replenishment plan timing and fairness standard. The Standard requires replenishment to occur “within a period and in a manner the RSE licensee determines will ensure that the RSE licensee acts fairly in dealing with beneficiaries and minimises the risk of adverse outcomes for beneficiaries” (Shortfall management, para 1). That gives the RSE licensee discretion on timing but conditions it on fairness and minimising adverse outcomes. The Standard does not set a hard deadline, leaving judgement calls and potential APRA scrutiny. APRA may require a revised plan if it considers the plan non-compliant (Shortfall management, para 3).

• Board approval prior to implementation of replenishment plans. The plan must be approved by the Board prior to implementation (Shortfall management, para 2). Emergency or urgent funding decisions may still require formal Board sign-off before being implemented as replenishment, unless APRA has provided a written exclusion or adjustment.

• Costs of external expert reports are RSE licensee-funded and subject to a 30-business-day timeline. If APRA requires an external expert, the RSE licensee must pay and provide the report plus the Board’s preliminary response within 30 business days of receipt of the report (Review and audit, para 3). That creates a fixed and potentially tight deadline and direct cost.

• Use limitations and a narrow list of permitted uses. ORFR resources are only available for the listed purposes (Use of ORFR financial resources, paras 1.1-1.3). The Standard does not permit broader re-purposing of ORFR funds for other prudential needs, so RSE licensees must keep separate liquidity and capital arrangements for other contingencies.

• Interaction with group policies. If the RSE licensee relies on group policies or functions, the Board must approve and ensure those policies appropriately reflect the RSE licensee’s operations (RSE licensees that are part of a group, para 1). That creates an internal governance requirement to adapt group controls to the RSE’s prudential needs.

• Prior APRA discretions do not automatically carry forward. If an RSE licensee wants to rely on a prior APRA discretion under an earlier version of the Standard, it must contact APRA (Previous exercise of discretion, para 1). Do not assume grandfathering.

• Notification before material changes. An RSE licensee must notify APRA before making a material change to the ORFR target amount (Notification requirement, para 1). What constitutes “material” is not defined in the Standard text, creating a judgement call that may prompt APRA queries if RSE licensees change targets without consultation.

These “gotchas” identify points where either APRA’s supervisory leverage or uncertainties in the Standard’s drafting can create operational or compliance risk for RSE licensees. The Standard structures responsibilities and leaves several material judgements to licensees, while reserving APRA’s power to modify outcomes in writing.

The Standard prescribes a clear set of required documents, approvals and operational arrangements. A practical compliance programme, grounded in the Standard’s text, should include the following steps.

1. Establish governance ownership and Board approvals

   • Assign Board-level responsibility for ORFR oversight and implementation. Obtain formal Board approval of the ORFR strategy and maintain minute records showing the Board’s consideration and approval as required (ORFR strategy, para 2).
   • For RSE licensees in corporate groups, ensure the Board explicitly reviews and approves any group policies or functions used by the RSE and documents how those policies have been adapted to the RSE licensee’s operations (RSE licensees that are part of a group, para 1).

2. Develop the ORFR strategy document

   • Draft an ORFR strategy that includes each of the seven minimum elements listed: ORFR target amount and tolerance limit (with rationale), drawdown processes and parameters, approach to holding resources (ensuring eligibility conditions), investment strategy for reserves, replenishment plan process, review process, and wind-up treatment (ORFR strategy, para 1.1-1.7).
   • Ensure the strategy explains how the ORFR target and tolerance were determined prudently with reference to operational risk profile, permitted uses and business size/complexity (ORFR target amount and tolerance limit, para 2).

3. Set the ORFR target and tolerance with documentation

   • Produce the internal methodology and assumptions supporting the ORFR target amount and tolerance limit. Ensure documentation ties the quantum to operational risk assessments, business mix, and the permitted uses under the Standard (ORFR target amount and tolerance limit, paras 1-2).
   • Maintain scenarios and stress-testing outputs that demonstrate the target and tolerance are prudent. Keep records so APRA can assess reasonableness and, if APRA imposes a different amount, be prepared to comply within any specified time (ORFR target amount and tolerance limit, para 3).

4. Structure and tag eligible resources

   • Ensure operational risk reserves held within the RSE are separately identifiable in accounting and systems, are legally unrestricted (unencumbered), and are readily available to be deployed in a timely manner (Access to ORFR financial resources, para 1.1-1.2). Test actual legal and operational impediments to access.
   • If using trustee capital to meet the ORFR, ensure it is in a form equivalent to Common Equity Tier 1 capital. Document legal advice and supporting analysis of why the instrument is CET1-equivalent (Access to ORFR financial resources, para 2).

5. Define permitted drawdown and replenishment procedures

   • Formalise the processes and parameters for determining when and how ORFR resources can be used, including thresholds, governance approvals and post-use replenishment triggers (ORFR strategy, para 1.2).
   • Prepare replenishment plan templates that will meet the Standard’s minimum content: explanation of cause, per-RSE amounts, funding source(s), and expected dates for restoration to the ORFR target amount (Shortfall management, para 1.1-1.4).
   • Ensure Board approval is obtained for any replenishment plan prior to implementation (Shortfall management, para 2).

6. Implement review, audit and reporting arrangements

   • Schedule an annual review of the ORFR target and tolerance, and require reviews following any material operational risk incident or material business change. Report findings to the Board as required (Review and audit, para 1).
   • Put in place internal audit procedures and external audit arrangements to test compliance and the adequacy of the ORFR strategy (Review and audit, para 2).
   • Establish record-keeping and escalation pathways to prepare for possible APRA requests for an external expert assessment; budget for the cost of such experts and plan to provide the report and the Board’s preliminary response within 30 business days (Review and audit, para 3).

7. Ensure written interaction with APRA

   • Where APRA gives a discretion, ensure that APRA’s exercise of power is recorded in writing as required (Interpretation, para 1). If relying on any prior written discretion under a previous version of the Standard, contact APRA to confirm reliance is acceptable (Previous exercise of discretion, para 1).
   • Notify APRA prior to making any material change to the ORFR target amount (Notification requirement, para 1).

8. Align investment and liquidity policies

   • Draft an investment strategy for operational risk reserves that aligns with the requirement that the resources be “readily available” and preserves capital where trustee capital is treated as CET1-equivalent (ORFR strategy, para 1.4; Access to ORFR financial resources, para 1.2-2).
   • Coordinate with liquidity policies to ensure replenishment sources can be mobilised without adverse outcomes for beneficiaries and in a manner the Board considers fair (Shortfall management, para 1).

9. Test and document stress scenarios and member-impact analysis

   • Build stress-test scenarios that show how ORFR resources would be deployed for permissible uses including remediation and continuity under CPS 230 obligations (Use of ORFR financial resources, para 1.2).
   • Document the expected member outcomes under each scenario to demonstrate the replenishment timing and approach meet the Standard’s fairness and minimising-adverse-outcomes requirement (Shortfall management, para 1).

10. Prepare for APRA scrutiny and possible tailored requirements

    • Given APRA’s ability to set or adjust ORFR targets for a licensee or class of licensees (ORFR target amount and tolerance limit, para 3), maintain ready access to the underlying methodologies and Board minutes to support the RSE licensee’s position and to implement APRA-imposed requirements within any specified timeframe.
    • Keep a clear compliance file that maps each element of the ORFR strategy, approvals, audits and reviews to the corresponding clause in the Standard.

Following these steps produces the core documents and operational changes the Standard requires: a Board-approved ORFR strategy, documented ORFR target and tolerance with prudent rationale, segregated and eligible ORFR resources, replenishment plans with Board approval, annual and incident-triggered reviews, audit arrangements, and ready processes for APRA engagement. Document everything; APRA’s written exercises of power and the 30-business-day timelines for expert reports create discrete administrative deadlines and recordable obligations.