Operational resilience matters most when something goes wrong. We’re pleased to confirm that base2Services has been independently assessed against APRA Prudential Standard CPS 230 - Operational Risk Management.
The assessment confirms that the way we manage operational risk, business continuity and the delivery of critical cloud services align with the expectations CPS 230 places on organisations operating in Australia’s regulated financial services sector.
What is CPS 230?
CPS 230 is the Australian Prudential Regulation Authority’s standard for operational risk management, requiring regulated organisations to manage operational risk, maintain critical operations through disruption and manage the risks associated with the service providers they rely on.
What this means for our customers
For our customers, the value is practical: independent scrutiny of the operational practices behind the services we deliver.
This includes how we approach:
- Operational risk management - identifying, assessing, monitoring and managing risks that could affect service delivery
- Business continuity and resilience - preparing for disruption and supporting the continued delivery and recovery of critical services
- Service provider governance - understanding dependencies, responsibilities and risks across the services that support customer environments
- Controls and accountability - maintaining structured processes around how operational risks are managed and escalated
For customers in financial services and other regulated environments, this provides a clearer basis for assessing base2Services as a technology partner.
Resilience beyond the infrastructure
Reliable cloud operations depend on more than highly available infrastructure. They also depend on how changes, risks, incidents and recovery are managed.
That operational discipline has always been central to how we manage customer environments. Our CPS 230 assessment adds another layer of independent validation alongside our ISO/IEC 27001:2022 certification (renewed December 2025) and our independent assessment against APRA CPS 234 (first achieved in 2021 and most recently renewed in April 2026). Together, they provide assurance across information security, governance and operational resilience.
When customers rely on us to operate critical cloud infrastructure, resilience needs to be built into the way the service is operated every day.
Looking for a cloud partner that understands regulated environments and operational resilience? Talk to our team.