Obligations turned into operational controls
Frameworks live in a versioned registry with their source instrument, regulator and version. Each control has an owner, the AI systems it governs and an implementation level you can defend.
Northwind Mutual ⌄Console › Controls › Control portfolioSearch ⌘KProductionModelPolling
Control portfolio
81 controls across 3 frameworks, mapped to 148 AI assets.
Map controlAssign owners
Frameworks
3- CPS 230 Operational Risk ManagementAPRA, 41 controls
- CPS 234 Information SecurityAPRA, 24 controls
- FAR, Insurance Key FunctionsAPRA and ASIC, 16 controls
EvidencedImplementedIn progressNot started
31 of 41 CPS 230 controls implemented or evidenced. 4 not started.
CPS 230 Operational Risk Management
F2026L00475Available| ID | Control | Owner | Assets | Implementation | Evidence |
|---|---|---|---|---|---|
| OR-01 | Critical operations and AI dependencies mapped | Chief Risk Officer | 12 | Evidenced | 3 |
| OR-07 | Third-party AI provider due diligence | Procurement | 9 | In progress | 1 |
| OR-12 | Change control for AI models in production | Head of Platform | 31 | Evidenced | 2 |
| OR-15 | Human approval above payment thresholds | Claims Ops Lead | 4 | Evidenced | 2 |
| OR-21 | AI incident escalation to operational risk | Operational Risk | 148 | Implemented | 1 |
| OR-26 | Tolerance levels for AI-supported critical operations | Chief Risk Officer | 0 | Not started | 0 |
| OR-28 | Business continuity for AI-dependent services | Head of Resilience | 6 | Implemented | 1 |
| OR-31 | Service provider register includes AI vendors | Procurement | 14 | Evidenced | 2 |
| OR-34 | Board reporting on AI operational risk | Company Secretary | 0 | In progress | 1 |
Map once, see it everywhere
A control mapped to a framework clause shows up on every AI system it governs, with who runs it and how far it is implemented. Changes to a published control are versioned, not overwritten.
- Source instrument, version and regulator kept with each framework
- Obligations tracked with their effective dates
- Controls linked directly to the AI systems they govern
- Published controls versioned, with an approval trail
In the registry today
81 controls across three Australian frameworks
Let's connect
Tell us where your AI programme is today. We start with a short, scoped pilot on your own AI estate, and every enquiry is handled in confidence.