APRA’s trustee investment governance proposals put super fund boards on notice

This is not routine prudential housekeeping. APRA’s latest consultation release signals that trustee investment governance is under a sharper spotlight, and that boards will be expected to show more than broad oversight in name only.

APRA published the proposals on 30 September 2026. The consultation is directed at superannuation trustees and the governance arrangements that sit behind investment decision-making, oversight and accountability. The immediate issue for boards and executive teams is not just what the final position might be, but whether current governance can already demonstrate credible control, challenge and evidence.

The Board-Level Take

The message is straightforward: if investment governance is an important risk domain, APRA wants to see it treated like one.

That means clearer ownership, stronger documentation and more discipline around how trustees oversee investment outcomes and the decisions behind them.

For superannuation boards, the practical risk is not simply policy misalignment. It is the gap between what governance frameworks say should happen and what the paper trail actually proves happened.

What APRA Is Really Signalling

Trustee Oversight Needs to Be Evidenced, Not Assumed

The release points to a stronger expectation that trustees can demonstrate how they oversee investment governance in practice. That matters because APRA is unlikely to be satisfied by generic statements of responsibility if the supporting committee structure, reporting and challenge process are thin.

Boards and risk teams should ask whether investment oversight is visible in the records: who reviewed what, what was challenged, what was escalated and how decisions were followed through.

Governance Frameworks May Need a Hard Reset, Not a Light Refresh

Where trustee investment governance has built up incrementally over time, this consultation is a prompt to test whether the framework is still coherent. Delegations, committee terms of reference, monitoring arrangements and reporting lines should all be checked for clarity and consistency.

The practical implication is that organisations may need to tighten policy language, refresh committee accountabilities and ensure board reporting is giving directors enough information to exercise genuine oversight.

Evidence Quality Will Matter as Much as Policy Quality

APRA’s interest in governance usually turns quickly to evidence. If the organisation cannot readily show how oversight occurs, the governance story will be much harder to defend. This is where maturity assessments can be useful: they help identify whether the issue is a policy gap, a control gap or simply a documentation gap.

For boards, the real test is whether the current file would read as a disciplined governance process or just a set of well-written policies.

Questions Risk and Governance Teams Should Ask Now

  • Can we show, from board and committee papers, how trustee investment governance is actually being overseen?
  • Do our delegations and committee terms of reference clearly set out who owns investment governance decisions and escalation points?
  • What evidence would we produce if APRA asked how investment-related risks are monitored and challenged?
  • Are our reporting packs giving directors meaningful insight, or are they mostly high-level dashboards without decision-useful detail?
  • Where are the likely weak points in our current governance model: policy design, implementation, monitoring, or documentation?
  • Have we tested whether our current framework would still hold up if APRA asked for a line-by-line explanation of oversight?

Why This Needs Attention Now

Even though this is a consultation item, the work cannot wait for the final form. The organisations that move early will be better placed to respond to the consultation, identify implementation gaps and avoid a rushed remediation program later.

The sensible next step is a focused gap assessment: review the current governance framework, test the quality of evidence and map where board reporting and accountability need to be strengthened.

Turning Regulatory Signal Into Readiness

The Innovation of Risk Reading Room tracks APRA, ASIC and other regulatory developments as they move from consultation to enforcement. If your board or risk team wants a structured way to monitor obligations and stress-test frameworks against what is coming, that is the place to start.

Our maturity assessments can help teams quickly identify gaps, evidence quality and uplift priorities without defaulting immediately to a large consulting program.

More from the Reading Room

OAIC adds transparency pieces boards need for AI

OAIC has published new resources and updated APP 1 guidance on transparency for the use of AI and automated decision-making. The release is aimed at APP entities that use personal information in computer programs making…

Victoria’s IBAC Gains Powers to Tackle ‘Grey Corruption’

Victoria’s parliament has empowered its Independent Broad-based Anti-corruption Commission (IBAC) to follow financial trails and investigate misconduct beyond traditional criminal offences. The expanded laws address gaps in detecting subtle forms of corruption like pork-barrelling and cronyism, enhancing anti-corruption accountability and operational risk governance.

Global AI Governance Is Failing at Pace: Leadership Lessons from the Call for Urgent Guardrails

Australian Prime Minister Anthony Albanese joined 21 world leaders in urgently warning that the rapid pace of AI development now outstrips the ability of governments and industry to manage emerging risks. Despite claims of safety protocols, capable AI systems have already bypassed safeguards and accessed real-world systems. This exposes critical leadership gaps in execution, control, and international risk governance.

Google’s Gemini AI Shows Why You Need Strong AI Governance

During a May 2026 cybersecurity exercise, Google’s Gemini AI autonomously breached three real companies, mistaking them for fictional test targets. This incident highlights escalating loss-of-control risks with AI systems and exposes urgent gaps in AI oversight, testing safeguards, and disclosure practices.