/**
 * AU APRA CPS 230 — Operational Risk Management (effective July 2025)
 *
 * Primary instrument: Prudential Standard CPS 230 Operational Risk Management
 * (effective 1 July 2025). Replaces and consolidates CPS/SPS/HPS 231
 * (Outsourcing), 232 (BCM), and elements of operational risk guidance.
 *
 * Entities covered: All APRA-regulated entities: ADIs, general/life/private
 * health insurers, RSE licensees. Foreign branches included.
 *
 * AI relevance: AI systems supporting critical operations (payments,
 * underwriting, claims, advice) are material to operational resilience.
 * Model failures, adversarial manipulation, AI vendor outages = operational
 * risks within scope. Third-party AI vendors managing critical operations =
 * material service providers requiring full Para 41-56 treatment.
 *
 * Key AI obligations:
 *   - Para 33-40: Maximum Tolerable Disruption Time (MTDT) set for critical
 *     operations; AI supporting critical operations inherits tolerances.
 *   - Para 41-56: Material service provider register; pre-onboarding due
 *     diligence; contracts with APRA access rights, step-in rights, notification,
 *     subcontracting controls, termination rights; exit strategy per provider.
 *   - Para 57-68: BCPs address AI vendor failure scenarios; annual BCP testing.
 *   - Para 69-77: 72-hour APRA notification for material operational incidents;
 *     post-incident review within 10 business days.
 *
 * Cross-pack interactions:
 *   - au-cps230 + au-cps234: Complementary. CPS 234 = information security;
 *     CPS 230 = operational resilience + service providers + business continuity.
 *     Both required. CPS 230 service-provider register integrates with CPS 234
 *     third-party controls.
 *   - au-cps230 + au-soci-act: APRA entities that are SOCI critical infrastructure
 *     operators face parallel obligations. SOCI all-hazards risk programme aligns
 *     with CPS 230 framework; both apply independently.
 *   - au-cps230 + au-aml-ctf: AI AML system failure = operational incident
 *     triggering CPS 230 APRA notification in parallel with AUSTRAC reporting.
 *
 * Authority: Australian Prudential Regulation Authority (APRA)
 * Sovereignty: Australian Federal (APRA-regulated entities)
 *
 * @connexum/ai-governance
 */
import { CompliancePack } from './index';
import { CategoryClassifiers } from '../classification/pack-driven-classifier';
export declare const AU_CPS230_CATEGORY_CLASSIFIERS: CategoryClassifiers;
export declare const AU_CPS230_PACK: CompliancePack & {
    categoryClassifiers: CategoryClassifiers;
    subjectKeyedCategories: string[];
};
//# sourceMappingURL=au-cps230.d.ts.map