Australia APRA’s Climate Financial Risk Guidance CPG 229: APRA’s climate financial risk guidance (CPG 229) embeds climate risk expectations into prudential governance

What’s Required

1) Governance and accountability for climate risk as a financial risk: CPG 229 frames climate risk as financially material, requiring boards and senior management to ensure governance structures can identify and manage climate-related risks and opportunities. Practical compliance includes:

• board-approved risk appetite statements covering climate risk;

• clear delegation and accountability;

• management information systems that surface climate risk exposures.

2) Integration into risk management frameworks: CPG 229 is designed to fit within existing risk management and governance frameworks, not as a parallel ESG program. Institutions should integrate climate risk into:

• credit risk (counterparty exposures, collateral impairment, transition risk);

• insurance risk (claims volatility, underwriting assumptions);

• operational risk (business continuity, physical risk impacts);

• investment risk (portfolio transition and valuation impacts).

3) Scenario analysis and stress testing capability: APRA’s guidance emphasises scenario analysis as a tool to understand exposure under different physical and transition pathways. Compliance in practice requires:

• defensible scenario selection;

• documented assumptions;

• model governance, validation, and change control;

• clear use of results in decision-making (capital allocation, underwriting, risk appetite updates).

4) Data, measurement, and evidence: Institutions must govern data quality for climate risk and ensure traceability of key metrics. Common requirements include: sector classification, geography exposure, emissions proxies, and borrower transition plans. Weak data governance undermines both supervision and public disclosure credibility.

5) Disclosure and consistency with other reporting regimes: CPG 229 interacts with broader disclosure expectations: institutions must ensure climate risk statements are consistent across prudential reporting, annual reports, and sustainability disclosures. Inconsistency increases both supervisory and market conduct risk.

Important Deadlines

• Status and publication: APRA lists CPG 229 as current and dated 26 November 2021, and institutions should treat it as active supervisory guidance.

• Supervisory cycles: practical deadlines are examination cycles, internal audit plans, and board reporting timetables, because APRA expects ongoing capability development.

Current Status

CPG 229 is current APRA guidance and is intended to shape how APRA-regulated entities implement climate risk management and governance within prudential expectations.

Penalties for Non-Compliance

APRA enforcement typically occurs via supervisory intervention: remediation plans, increased scrutiny, governance findings, and potentially capital or risk management consequences. The most material “penalty” is regulatory intervention affecting business strategy and operations.

Examples of Known Violations

1. climate risk treated as CSR rather than integrated risk management;

2. scenario analysis conducted but not linked to decisions;

3. undocumented assumptions and weak model governance;

4. poor data lineage for climate metrics;

5. inconsistent climate risk statements across public disclosures.

Resources

• https://www.apra.gov.au/climate-change-financial-risks

• https://www.apra.gov.au/sites/default/files/2021-11/Final%20Prudential%20Practice%20Guide%20CPG%20229%20Climate%20Change%20Financial%20Risks.pdf