What APRA's industry letter means for your organisation

Scaling AI risk management and governance

Scaling AI

AI is becoming embedded in core processes and decisions, and competitive advantage increasingly depends on how safely and effectively you scale it. APRA's letter to industry makes clear that governance, risk management, resilience and assurance practices are not keeping pace with adoption. For everyone else, it is a useful reference point that reinforces good-practice expectations already echoed in the Australian Government's Voluntary AI Safety Standard (VAISS). 

Whether you are APRA-regulated or not, the expectation is the same: scale AI with clearer accountability, continuous assurance and stronger control of third-party and agentic risks. Our two points of view set out what that looks like in practice.

Download the APRA regulated entity point of view

Download the cross-industry point of view

Contact us

Jon Benson

Cybersecurity & Privacy, Partner, PwC Australia

Contact form

Nicola Costello

Partner, Digital and AI Trust Leader, PwC Australia

Contact form

Pia Chakravarti

Cybersecurity & Privacy, Partner, PwC Australia

Contact form

Bevan Lim

Partner, Assurance, PwC Australia

Contact form

Follow PwC Australia