Description

A focused course, tailored for you

The Compliance Analyst's Regulatory Testing Playbook

How to design, run, and document compliance monitoring tests that produce audit-ready evidence and satisfy prudential supervisors.

Your compliance monitoring programme produces reports. Whether those reports produce credible evidence when the APRA supervisor asks to inspect the underlying testing files is a different question.

$199 one-time

Tailored to your situation. Access within 24 hours. 30-day money-back.

Includes a hand-built implementation playbook delivered alongside course access, generated for your specific situation.

Why this course

Investment banking compliance analysts are typically skilled at producing monitoring outputs. The gap most programmes carry is between the output, the report to the risk committee, and the artefact the regulator wants to see: the actual testing procedure, the evidence reviewed, the exception record, the resolution trail. CPS 230 has made this gap more consequential. The standard requires documented evidence that service provider monitoring is working, not just that it exists. An analyst who can design a testing methodology that generates credible evidence at every step, not just a readable summary, is far more useful to the compliance function than one who can only produce the finished report.

What you walk away with

Design a compliance monitoring programme structured around APRA CPS 230 obligations and your institution's material service provider register.
Write a testing methodology document that APRA supervisors can trace back to the relevant standard without requiring further explanation.
Build an evidence repository with naming conventions, version control, and access protocols that survives personnel changes and regulatory examinations.
Run the quarterly monitoring cycle with a pacing schedule and exception escalation path that meets board reporting deadlines.
Draft board attestation packs that allow directors to attest with confidence, with the supporting evidence trail clearly mapped.
Respond to APRA supervisory letters with a structured remediation plan and a document control discipline that demonstrates programme maturity.

The 12 modules

Module 1. Reading CPS 230 as a Compliance Analyst

CPS 230 is written for boards and senior management, not analysts. This module walks through the standard section by section, identifying which obligations fall to the compliance function, which fall to operational risk, and which require joint ownership. You produce an obligations register for your institution, with each requirement mapped to a function, an owner, and a testing approach that generates inspectable evidence.

Module 2. Building and Maintaining the Material Service Provider Register

The compliance monitoring obligation under CPS 230 starts with a credible register. This module covers how APRA defines materiality, how to work with procurement and technology teams to build and maintain the register, and how to document the rationale for inclusion or exclusion decisions in a way that survives a supervisory review. You produce a register template and a classification methodology document.

Module 3. Designing the Monitoring Plan

A monitoring plan that maps obligations to tests and tests to evidence is the foundation of a defensible compliance programme. This module covers how to convert standard text into testable statements, how to set testing frequency and scope based on residual risk, and how to write the plan in a format your regulator can read without a briefing. You produce a monitoring plan framework document ready for the next cycle.

Module 4. Writing the Testing Methodology Document

A testing methodology document explains how each monitoring test is designed, what evidence it reviews, and how the tester determines a pass or fail result. This module shows how to write methodology documents that leave no interpretive room for a reviewer, how to peer-review them before the test cycle begins, and how to update them when the underlying regulatory standard changes. You produce a methodology template for two test types.

Module 5. Evidence Repository Design and Filing Protocol

The evidence file is what APRA reviewers inspect when they examine your monitoring programme. This module covers naming conventions, folder structures, version control, and access controls for a compliance evidence repository. It addresses the specific challenge of a diversified financial group where monitoring evidence spans multiple business lines and custody regimes. You produce a repository design document and a filing protocol.

Module 6. Running the Quarterly Monitoring Cycle on Schedule

A monitoring cycle that exists in a plan but consistently slips in execution is not a monitoring programme. This module covers how to pace reviews across an analyst team, manage dependencies on business line data, handle late responses from first-line stakeholders, and close the cycle on schedule. You produce a tracking template and a stakeholder escalation communication that does not read as adversarial.

Module 7. Exception Records, Escalation, and Resolution Tracking

An exception identified in a monitoring review must be documented, risk-assessed, assigned to an owner, tracked to resolution, and reported to the appropriate governance body. This module shows how to write exception records that satisfy a risk committee and a regulator simultaneously, how to set resolution timelines that are defensible, and how to present a persistent exception without triggering a supervisory finding. You produce an exception register template.

Module 8. Cross-Divisional Compliance Monitoring at a Diversified Financial Group

A financial group with asset management, banking, commodities, and infrastructure divisions under one APRA licence runs compliance monitoring across fundamentally different business models. This module addresses how to maintain a consistent methodology across divisions while accommodating business-specific regulatory requirements, how to aggregate monitoring results at the group level, and how to present divisional performance to the group compliance committee without drowning the pack in caveats.

Module 9. Building the Board Attestation Package

A board attestation under CPS 230 requires directors to confirm the institution has adequate controls over its material service providers. The compliance team produces the pack that makes attestation possible. This module covers what to include, what to leave out, how to present exceptions in a way that is transparent without being alarming, and how to structure the evidence trail so directors can ask specific questions and get traceable answers.

Module 10. Managing APRA Supervisory Letters

An APRA supervisory letter requesting information about your compliance monitoring programme requires a response that is accurate, complete, and positioned to close the matter rather than open a further enquiry. This module covers how to triage the request, how to structure the response document, how to manage the internal review process before submission, and how to follow up on remediation commitments in a way that demonstrates programme improvement.

Module 11. Regulatory Change Management Across APRA, ASIC, and International Regulators

A compliance analyst tracking regulatory change across APRA, ASIC, and international regulators affecting the institution's product set manages a continuous stream of obligation updates. This module covers how to build a regulatory change register, how to assess impact on the monitoring programme, how to brief business line stakeholders on what changes require action, and how to update testing methodology documents without disrupting the active monitoring cycle.

Module 12. Annual Programme Review and Maturity Assessment

A compliance monitoring programme reviewed once a year against an external benchmark gives the compliance function a credible basis for presenting maturity to the board and to APRA. This module covers how to structure the annual review, how to select a benchmark framework, how to present the gap assessment as a programme improvement plan rather than a deficiency list, and how to update the monitoring plan and methodology documents for the next cycle.

How this addresses your situation

Specific modules that map to what you said you are dealing with.

You need to implement CPS 230 monitoring obligations but the standard text does not tell you how to design the testing programme that satisfies an examiner.

Your monitoring tests produce results but APRA reviewers ask for the underlying evidence files, which are inconsistently organised across the analyst team.

The board attestation cycle is approaching and the supporting pack is not structured to allow directors to attest with confidence.

A supervisory letter has arrived requesting evidence of your material service provider monitoring and you need to respond within 20 business days.

What you get with this course

Twelve written modules in the Art of Service learning environment, each covering a distinct phase of the compliance monitoring programme design and delivery cycle.
Downloadable templates for the obligations register, monitoring plan, testing methodology document, evidence repository protocol, exception register, and board attestation pack structure.
A hand-built implementation playbook tailored to the compliance analyst role in a diversified financial services group, delivered alongside course access.

What you will have in hand by Day 1, Week 1, Month 1

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.

Before and after

Before

Your monitoring programme produces reports the risk committee accepts. When APRA asks to inspect the evidence behind those reports, the response requires days of file retrieval and explanation.

After

Each monitoring test closes with an evidence file that maps to the methodology document and the relevant standard. The board attestation pack is structured so directors can attest and ask specific questions. A supervisory request can be responded to in a week.

What happens if you do not address this

A compliance monitoring programme that cannot produce inspection-ready evidence on demand has not been tested against the standard that matters. APRA supervisory reviews increasingly go beyond the report to the underlying testing files. The gap between what compliance can produce and what the regulator expects to see is the gap the programme needs to close before the next supervisory cycle.

Who it is for

A compliance analyst in a financial services institution who owns or contributes to the compliance monitoring programme. Typically two to six years into a compliance career, working in investment banking, asset management, or a diversified financial group regulated by APRA and ASIC. Already conducting monitoring reviews and reporting, but wanting to build the technical skills to design better tests, write methodology documents that hold up to regulatory scrutiny, and produce evidence packages that support board attestations.

Who this is NOT for. Someone looking for introductory regulatory content. This course assumes familiarity with APRA standards, financial services compliance operations, and basic monitoring concepts. It is also not for senior compliance managers whose work is primarily stakeholder management rather than programme design and evidence production.

How it arrives

Text-based course in the Art of Service learning environment, plus downloadable templates and worked examples for every module, plus the hand-built implementation playbook delivered alongside course access.

Time investment. Each module takes 30 to 50 minutes to complete. The full course can be completed in three to four focused sessions. The templates are ready to use as working documents immediately after each module.

Why $199 is the right number

APRA guidance documents and consultation papers explain what the regulator wants but not how to build the testing programme. Internal compliance training covers the institution's existing framework but rarely the methodology behind it. External compliance courses at this level of specificity for APRA-regulated financial services are priced at several thousand dollars and require scheduled attendance.

FAQ

Does this course require prior knowledge of CPS 230?

Familiarity with APRA standards and compliance monitoring is assumed. The course builds on that foundation rather than introducing it.

Is the content specific to banking or does it also cover asset management and other financial services?

The course is designed for compliance functions operating across a diversified financial group. Module 8 specifically addresses the challenge of running a consistent monitoring methodology across different business lines under the same regulatory licence.

Will the templates work in my institution's existing document management system?

The templates are provided in editable formats. They are designed to be adapted to your institution's naming conventions and system requirements, not used as-is.

How quickly can I apply the methodology to an active monitoring cycle?

The monitoring plan framework and testing methodology templates in modules 3 and 4 can be applied to the next testing cycle immediately. The board attestation structure in module 9 can be adapted before the next quarterly governance cycle.

30-day money-back guarantee. If after a week of working through the materials this is not what you needed, reply to the receipt email and a full refund is processed. No questions, no forms.

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.