# Desktop Scenario Exercises for CPS 230 > Test your ability to maintain critical operations within CPS 230 tolerance levels through practical, board-level scenario exercises designed for APRA-regulated entities. *This content is available in full at: https://www.fixinc.io/disciplines/desktop-scenario-exercises-for-cps-230* ## Overview CPS 230 Desktop Scenario Exercises are structured, discussion-based tests designed to evaluate how an APRA-regulated entity would maintain its critical operations within tolerance levels during severe but plausible disruptions. They are a regulatory requirement under CPS 230. Fixinc designs and facilitates CPS 230-aligned desktop exercises that replicate realistic disruption scenarios. These exercises guide boards, executives, and staff through response decisions, then provide findings, gap analyses, and recommendations for improving resilience and compliance. ## Exercise Structure Exercises replicate severe but plausible disruption scenarios, from technology outages to service provider failures. Each session is structured to test CPS 230 requirements including critical operation continuity, board oversight, and communication strategies with clear findings and improvement recommendations. **Typical Exercise Scenarios Include:** - Activation and execution of Business Continuity Plans (BCPs) - Maintenance of critical operations within tolerance levels - Response to material service provider failures - Board and executive decision-making during crises - Communication strategies for staff, customers, and regulators Fixinc tailors scenarios to your specific business mix and regulatory obligations. ## Regulatory Compliance Requirements APRA requires financial institutions to conduct annual business continuity exercises that prove their ability to meet defined tolerance levels. Desktop exercises provide practical evidence of compliance, strengthen response capability, and ensure board and executive readiness. At a minimum, APRA requires annual continuity exercises. Additional exercises may be needed following material changes in operations, technology, or service providers. Fixinc supports annual and event-driven programs to keep your entity compliant. Without regular, structured testing, organisations risk non-compliance and unpreparedness in real events. Desktop exercises provide both compliance evidence and practical readiness. ## Board Accountability Boards are accountable for approving tolerance levels and overseeing continuity testing. Desktop exercises give directors firsthand experience of decision-making under pressure and provide evidence for APRA that resilience capabilities are credible. Fixinc ensures exercises are board-focused and regulator-ready. ## Delivery Approach Fixinc delivers Desktop Scenario Exercises for CPS 230 through a four-step methodology: 1. **Plan**: Agile, first-principles planning ensures a smooth rollout of your refreshed program 2. **Do**: Desktop Scenario Exercises for CPS 230 is rolled out smoothly at your organisation 3. **Check**: Draft exercises are validated to ensure effectiveness 4. **Act**: Your team and ours will be ready when your Desktop Scenario Exercises for CPS 230 is activated in real-life ## Engagement Process **Initial Consultation:** - A link will be sent via email from the Advisory team with scheduling options for phone, Teams, Zoom, or in-person meetings - 30-45 minute discussion to understand your objectives and share how Fixinc delivers services - Proposal delivered within 24 hours detailing the scope of work - Final quote provided for signature following proposal discussion - Proposals remain open for 5 weeks before assuming timing is not suitable **Delivery Phases:** - **Review and Health Check**: All implementations start with a deep review of existing capabilities, setting benchmarks from best practice and ISO standards - **Design and Develop**: Build out Desktop Scenario Exercises for CPS 230 as part of your CPS 230 Compliance program to the highest quality available - **Validate**: Test and validate new exercises where appropriate, providing tangible evidence of capability and maturity to stakeholders - **Maintain**: Build a plan to ensure Desktop Scenario Exercises for CPS 230 runs annually to maintain momentum ## Benefits Fixinc provides expert facilitation, regulatory alignment, and tailored scenarios that reflect the unique risks of APRA-regulated entities. Exercises build confidence, prove CPS 230 compliance, and prepare your organisation for real-world disruptions. ## Related CPS 230 Compliance Disciplines - [Business Impact Analysis for CPS 230](https://docs.fixinc.io/disciplines/business-impact-analysis-for-cps-230.md): Meet CPS 230 requirements by identifying critical operations, dependencies, and tolerance levels - [ISO 22301-Aligned BIA Review for CPS 230](https://docs.fixinc.io/disciplines/iso-22301aligned-bia-review-for-cps-230.md): Review and align existing BIA to APRA's requirements on critical operations and tolerance levels - [ISO 22301 Gap Assessment for CPS 230 Compliance](https://docs.fixinc.io/disciplines/iso-22301-gap-assessment-for-cps-230-compliance.md): Identify where APRA-regulated entities fall short on business continuity and service provider oversight - [Business Continuity Plan for CPS 230 Compliance](https://docs.fixinc.io/disciplines/business-continuity-plan-for-cps-230-compliance.md): Develop and maintain BCPs that protect critical operations and define tolerance levels - [Business Continuity Training for CPS 230 Compliance](https://docs.fixinc.io/disciplines/business-continuity-training-for-cps-230-compliance.md): Equip teams and executives to meet CPS 230 obligations with tailored training - [Business Continuity Program Review and Audit for CPS 230](https://docs.fixinc.io/disciplines/business-continuity-program-review-and-audit-for-cps-230.md): Independent reviews and audits assessing compliance and readiness to maintain critical operations - [ISO 22301-2019 Internal Audit Support for CPS 230](https://docs.fixinc.io/disciplines/iso-223012019-internal-audit-support-for-cps-230.md): Help internal audit teams test business continuity controls and provide assurance to boards and APRA ## Frequently Asked Questions **Why are Desktop Scenario Exercises important for CPS 230 compliance?** APRA requires financial institutions to conduct annual business continuity exercises that prove their ability to meet defined tolerance levels. Desktop exercises provide practical evidence of compliance, strengthen response capability, and ensure board and executive readiness. **How often should CPS 230 Desktop Scenario Exercises be run?** At a minimum, APRA requires annual continuity exercises. Additional exercises may be needed following material changes in operations, technology, or service providers. **What do CPS 230 Desktop Scenario Exercises typically test?** Exercises test activation and execution of Business Continuity Plans, maintenance of critical operations within tolerance levels, response to material service provider failures, board and executive decision-making during crises, and communication strategies for staff, customers, and regulators. **How does Fixinc deliver Desktop Scenario Exercises for CPS 230?** Fixinc designs and facilitates CPS 230-aligned desktop exercises that replicate realistic disruption scenarios, guiding participants through response decisions and providing findings, gap analyses, and recommendations for improving resilience and compliance. **How do Desktop Scenario Exercises support Boards under CPS 230?** Boards are accountable for approving tolerance levels and overseeing continuity testing. Desktop exercises give directors firsthand experience of decision-making under pressure and provide evidence for APRA that resilience capabilities are credible. --- **View this page online:** https://www.fixinc.io/disciplines/desktop-scenario-exercises-for-cps-230 For program inquiries: [Contact Fixinc](https://www.fixinc.io/contact) | info@fixinc.org | +64 800 349 462