HomeRisk Management

Risk Management

APRA’s Corporate Plan Reinforces the Focus on AI Governance

The wrong response to increasing AI risk is to stop people using AI. That does not remove the risk. It often pushes AI use underground,...

Regulators continuous focus on delivering effective risk management

APRA’s licence conditions followed Deloitte findings of longstanding and pervasive non-financial risk weaknesses at Bendigo and Adelaide Bank. Bendigo Bank has announced a three-year, $70 million rectification program, while APRA retains a $50 million operational-risk capital add-on and requires independent assurance and board attestation.

The Hidden Cost of Poor Transparency in Insurance

ASIC's 2026 Report 838 shows that 31% of consumers who contacted their insurer obtained a lower renewal premium without changing cover. AFCA's complaint data adds a practical signal for boards testing car-insurance pricing and renewal transparency.

Beyond the Label: Importance of Accountability

An eight-month forensic investigation by Four Corners revealed widespread mislabelling and adulteration in food products sold in Australia, including tomato paste sourced from China’s Xinjiang region and seafood falsely promoted as Australian. In response, the ACCC launched an inquiry into misleading conduct, spotlighting the urgent need for stronger accountability and supply chain transparency to protect consumers.

BEAR breach notice puts cyber accountability back in the spotlight

APRA has published a news item on Bendigo and Adelaide Bank admitting to breaches of its BEAR obligations in relation to a cyber incident. This is a clear accountability and governance signal for boards and…

OAIC puts FOI transparency controls under the microscope

OAIC's review of 30 government agencies found FOI disclosure log gaps in timeliness, accessibility and ownership, while the Federal Court fined X Corp $650,000 for stonewalling an eSafety Commissioner transparency notice. Both cases show transparency obligations are now being tested as live operational controls, not paperwork.