APRA CPS 230 scenario testing with simulations

iluminr simulations let teams rehearse the decisions APRA CPS 230 cares about against severe-but-plausible scenarios, and keep a record of who decided what, and when. Run them as Microsimulations, full-scale simulations, or facilitated by our team of experts.

Simulations mapped to APRA CPS 230

Physical SecurityA Dark Day: Bomb ThreatAn anonymous caller threatens the safety of colleagues at a key site location with the imminent detonation of a bomb. Strategic response teams must move through critical decisions regarding the threat to delineate roles, responsibilities and delegated authorities in alignment with emergency response teams and stakeholders.Physical SecurityAccess Denied: Building FireNavigate a building fire by ensuring employee safety, coordinating with emergency services, communicating with stakeholders, and planning for alternative business locations due to site inaccessibility.Conduct & ReputationCEO Fallout: Racial CommentsManage the fallout from controversial racial comments made by the CEO, addressing crisis management, stakeholder communication, and executive safety concerns.Natural Hazards & ClimateClaims Surge: Severe WeatherProlonged severe weather drives widespread power outages, sparking a surge of storm-related claims that overwhelm triage teams and push systems beyond capacity. Respond to compounding severe but plausible event causing significant impacts to a critical operation.Third-Party & TechnologyConnectivity Down: Severe WeatherRespond to severe weather-induced operational disruptions, including widespread internet outages, by verifying role responsibilities and ensuring continuity in communications and operations.Third-Party & TechnologyCore Platform Outage: RollbackA critical platform update turns into a live-fire incident as a scheduled patch unexpectedly brings down key systems. Participants must navigate real-time service degradation, mounting customer pressure, and rollback decisions under duress. This Microsimulation tests cross-functional coordination, incident escalation, and communication flow - providing vital validation of operational resilience, rollback protocols, and regulatory compliance readiness.Natural Hazards & ClimateCrisis Mode: Natural DisasterActivate a multi-team response to a natural disaster impacting your infrastructure and staff safety, focusing on communication protocols and validating roles in essential service delivery.Conduct & ReputationDefrauded: Vendor PaymentsA long-standing vendor highlights non-payment of a significant volume of invoices, flagging an internal fraud situation. Participants are required to review their own roles and responsibilities in conjunction with their organization structure, including policies and anti-fraud compliance frameworks.Conduct & ReputationDirty Loans: Regulatory BreachA public notification by the regulator emanates in the media for your company regarding misconduct in loan origination and management. Your team must respond to compliance, operational and brand and reputation impacts.Third-Party & TechnologyExit Plan: Vendor InsolvencyA critical third-party vendor has filed for insolvency, causing both operational and data losses. Can your team execute the exit plan under pressure?Natural Hazards & ClimateFlooded Future: Climate ReckoningNavigate the chaos of a climate disaster resulting in major flooding, and the aftermath of public scrutiny. Safeguard operations, protect staff, and build resilience under the spotlight of regulatory oversight.Natural Hazards & ClimateHeatwave Havoc: Grid CollapseManage a complete multi-site grid collapse triggered by an intense heatwave, focusing on stakeholder communication and implementing contingency plans across multiple affected locations.Conduct & ReputationMisrepresented: Product LawsuitA catastrophic product misrepresentation causes significant regulatory, financial and brand pressure.GeopoliticalOn the Brink: Curbing ConflictNavigate the challenges posed by escalating tensions between economic powers, focusing on managing disrupted supply chains and validating critical response strategies.People & WorkforcePandemic: Remote ReadinessThis Microsimulation focuses on evaluating and enhancing your organization's ability to support a rapid shift to remote work.Natural Hazards & ClimatePower Outage: Localized Weather CrisisManage prolonged power outages caused by severe weather, focusing on stakeholder communication and implementing contingency plans for the affected area.Third-Party & TechnologyRipple Effect: Fourth-Party FalloutA critical system failure has occurred in your supply chain, creating significant operational impacts. Your third-party vendor experienced a service outage caused by a vulnerability introduced through an undetected AI-driven update in their supplier's systems. This failure has cascaded through your supplier's network, resulting in widespread service disruptions that are now affecting your business operations and customers.Physical SecurityShooter Threat: Event CancellationAn active shooter crisis unfolds at a major city stadium just hours before a high-profile sporting event. Participants must address the immediate physical security threat while also evaluating the potential need for event cancellation. This involves balancing the safety of attendees and staff against the financial implications of activating event cancellation insuranceNatural Hazards & ClimateSustained Power Outage: DC ShutdownA catastrophic heatwave leads to widespread grid failure, forcing organizations to consider drastic action: a controlled shutdown of their primary data center. This Microsimulation tests tactical preparedness, technical decision-making, and procedural clarity under constrained, real-time conditions. Ideal for stress-testing your organization’s ability to respond, coordinate, and protect data when the lights go out.People & WorkforceTalent Exodus: Workforce ResilienceAddress operational disruptions caused by a wave of employee resignations following your CEO’s controversial climate change remarks, focusing on maintaining business continuity and workforce stability.Third-Party & TechnologyTrapped: Vendor Modern SlaveryNavigate the ethical, legal, and operational challenges posed by a tech supplier embroiled in a modern slavery scandal, focusing on incident assessment and communication strategies.Third-Party & TechnologyVendor Outage: System DownRespond to a critical vendor cyber-attack that has disrupted essential services, focusing on business impact assessment, data review, and immediate contingency actions.Physical SecurityVIP Down: Severe IllnessAn executive is found to be severely ill while travelling to one of the company's offshore locations. This microsimulation exercises decision models and response protocols for dealing with the safety and potential repatriation of a VIP in an offshore location.Physical SecurityDisruption: Event ChaosManage an increasingly violent protest near a major conference, ensuring team safety, stakeholder communication, and preparedness for escalating risks.Physical SecurityHigh Security: Active ShooterHandle an active shooter incident near your organization by maintaining situational awareness, securing employee safety, and managing communications.Physical SecurityIntercepted: International Security ThreatA high-stakes security incident involving the violent interception of a corporate executive team's convoy during transit between office locations. The simulation aims to evaluate organizational readiness, response protocols, and decision-making processes during an international physical security crisis.GeopoliticalMIA: Global TensionsRising geopolitical tension leaves colleagues unaccounted for overseas. Assess the incident, manage stakeholders and escalation, and confirm your team can reach the communication templates and tools it needs.Natural Hazards & ClimateSeismic Shift: Earthquake ResponseThis Microsimulation focusses on reviewing and validating response plans and critical functions, strengthening cross-functional collaboration and alignment, and verifying communication protocols to ensure clarity and consistency during a crisis.Crisis LeadershipDefensible Disclosure: ESG ReportingDirectors' accountabilities meet an evolving sustainability reporting landscape. Make disclosure decisions under time pressure.

Mapping is indicative. Confirm scope against your own obligations.

Frequently asked questions

More in Asia-Pacific