[{"data":1,"prerenderedAt":91},["ShallowReactive",2],{"news-\u002Fnews\u002Faustralia-apra-signals-tougher-quantum-supervision":3},{"id":4,"title":5,"author":6,"authorTitle":7,"authorUrl":8,"body":9,"canonical":8,"category":43,"date":44,"description":45,"draft":46,"extension":47,"faqs":48,"findingsSource":8,"geo":58,"image":60,"industries":61,"keyFindings":8,"meta":64,"modified":65,"navigation":66,"path":67,"pullquote":8,"recommendations":8,"references":68,"related":72,"seo":79,"seoTitle":80,"signposts":8,"slug":81,"stats":8,"stem":82,"tags":83,"tldr":89,"__hash__":90},"news\u002Fnews\u002Faustralia-apra-signals-tougher-quantum-supervision.md","Australia's APRA Signals Tougher Quantum Supervision for Financial Firms","ArcQubit Team","",null,{"type":10,"value":11,"toc":39},"minimark",[12,17,24,27,30,33],[13,14,16],"h2",{"id":15},"australias-apra-signals-tougher-quantum-supervision","Australia's APRA signals tougher quantum supervision",[18,19,20],"p",{},[21,22,23],"strong",{},"24 JUNE 2026, SYDNEY",[18,25,26],{},"The Australian Prudential Regulation Authority signalled tougher quantum supervision on 24 June 2026. It told regulated financial firms to map their cryptographic dependencies, including those of third parties. Rather than issue a new quantum-specific rule, APRA uses its existing prudential standards CPS 234 and CPS 230 as the hooks for the expectation.",[18,28,29],{},"Those two standards already bind regulated firms. CPS 234 covers information security and CPS 230 covers operational risk, so APRA can supervise quantum readiness through them without waiting for a dedicated regulation. This mirrors how other supervisors, such as those using DORA in Europe, anchor cryptographic expectations in standing operational-resilience rules.",[18,31,32],{},"The emphasis on third parties is deliberate. A firm's cryptographic risk extends to the vendors and services it relies on, so mapping only internal systems would miss exposure that sits with external providers. Because financial firms depend heavily on third parties for critical functions, APRA wants that dependency chain included in the cryptographic picture.",[18,34,35,38],{},[21,36,37],{},"Why it matters."," APRA has put quantum readiness squarely inside its existing supervision, using CPS 234 and CPS 230 so firms cannot treat it as a future concern without a current hook. The focus on third-party dependencies means a firm's inventory must reach beyond its own systems. Regulated firms that map their full cryptographic footprint, vendors included, will be ready to answer APRA's questions as supervision tightens.",{"title":7,"searchDepth":40,"depth":40,"links":41},2,[42],{"id":15,"depth":40,"text":16},"Policy","2026-06-24","Australia's APRA signalled tougher quantum supervision in June 2026, telling firms to map cryptographic dependencies including third parties, via CPS 234 and 230.",false,"md",[49,52,55],{"q":50,"a":51},"What did APRA signal?","On 24 June 2026, APRA signalled tougher quantum supervision, telling regulated financial firms to map their cryptographic dependencies, including those of third parties. It uses existing prudential standards CPS 234 and CPS 230 as the hooks rather than issuing a new quantum-specific rule.",{"q":53,"a":54},"Which standards does APRA use as hooks?","APRA points to CPS 234, its information security standard, and CPS 230, its operational risk standard. Both already apply to regulated firms, so APRA can supervise quantum readiness through them without waiting for a dedicated quantum regulation.",{"q":56,"a":57},"Why map third-party dependencies?","A firm's cryptographic risk extends to the vendors and services it relies on, so mapping only internal systems misses exposure that sits with third parties. APRA's emphasis on third parties reflects how much financial firms depend on external providers for critical functions.",[59],"sydney","\u002Fassets\u002Fog-default.png",[62,63],"Financial Services","Cross-Sector",{},"2026-09-23",true,"\u002Fnews\u002Faustralia-apra-signals-tougher-quantum-supervision",[69],{"label":70,"url":71},"Australian Prudential Regulation Authority, \"Supervisory statement on quantum computing risk,\" Jun. 24, 2026.","https:\u002F\u002Fwww.apra.gov.au\u002F",[73,76],{"label":74,"url":75},"Australia's ASD Sets End-2026, End-2028 and End-2030 Planning Milestones","\u002Fnews\u002Faustralia-asd-latice-planning-guidance",{"label":77,"url":78},"Swiss FINMA Finds Banks and Insurers Lack Post-Quantum Roadmaps","\u002Fnews\u002Fswiss-finma-banks-lack-pqc-roadmaps",{"title":5,"description":45},"Australia's APRA Signals Tougher Quantum Supervision","australia-apra-signals-tougher-quantum-supervision","news\u002Faustralia-apra-signals-tougher-quantum-supervision",[84,85,86,87,88],"financial services","cryptographic discovery","supply chain","quantum readiness","for enterprises","Australia's APRA signalled tougher quantum supervision in June 2026, telling firms to map cryptographic dependencies including third parties, using CPS 234 and CPS 230 as hooks.","ISEe3M99g0JoPB0UA0yWAbn2utPQWQYEHlALkbpsvGU",1792182885570]