This white paper, developed in collaboration between Queensland University of Technology, Cisco, Splunk, and Innovation Central Brisbane, offers a pioneering approach to operational resilience. It brings together legal, compliance, risk, and technology leaders to explore how observability can support CPS 230 implementation.
Through an interactive mapping method, the paper explains how observability can serve as a bridge across organisational silos – offering fresh insights into building more adaptive, resilient, and trusted institutions.
Meet the Authors
This white paper is the product of a unique collaboration between legal, regulatory, technology, and cybersecurity experts from across Queensland University of Technology, Cisco, and Splunk.
Our Authors:
Professor Anna Huggins (QUT Law)
Professor Huggins is an internationally recognised expert in innovative regulatory and compliance processes in disrupted environments. Anna publishes widely on evolving regulatory and compliance responses to digitisation and automation, including rules as code, regulatory technology and digital compliance. Her previous research has advanced best practice by developing frameworks for identifying the features of regulation that facilitate and impede digitisation, and promoting greater alignment between natural-language regulations and their digital versions.
Professor Mark Burdon (QUT Law)
Professor Burdon is an internationally recognised expert in the legal consequences of digitisation, especially in information privacy law. He has an extensive history of industry-led, multi-disciplinary research. Previous research includes a diverse range of multi-disciplinary projects involving: digital compliance systems; the regulation of information security practices; legislative frameworks for the mandatory reporting of data breaches and data sharing in e-government.
Ms Imogen Forster (QUT Law)
Ms Forster is a PhD student researching compliance in uncertain legal and regulatory environments. She is supervised by Professors Huggins and Burdon. Her research interests include mapping strategies in the context of complex regulatory landscapes.
Professor Lizzie Coles-Kemp (Research Institute for Sociotechnical Cyber Security (RISCS) and Royal Holloway, University of London)
Professor Coles-Kemp is an international leader in qualitative digital methods. She is an Engineering and Physical Sciences Research Council (UK) fellow and has extensive experience delivering high quality outcomes in partner-based research. Her research has produced practical tools that government, industry and advisory bodies can use to implement people-centred digital security practice and safer digital inclusion programmes. She currently advises the UK Government’s Department of Culture, Media and Sport (DCMS).
Acknowledging Our Partners
Supporting the research team are industry experts from Cisco and Splunk, whose insights have shaped both the strategic direction and technical foundations of this project.
From Cisco, Reg Johnson, Terry Weber, and Harsha Hewapathirane provided invaluable guidance to ensure the white paper remains aligned with the evolving needs of industry and regulators.
From Splunk, Harry Chichadjian, Marty Przybylak, and Matthew Moore contributed specialised expertise in compliance technology, observability, and data analytics — bringing critical perspectives on how digital infrastructure can enable operational resilience.
Together, this collaborative team has helped create a white paper that addresses both the technological and regulatory complexities facing today’s financial services sector.
Brisbane Launch Recap
The CPS 230 Digital Compliance and Observability white paper was officially launched in Brisbane on 29 May 2025 at QUT Gardens Point. The event brought together professionals from financial services, technology, law, government, and academia to discuss CPS 230 through the lenses of digital compliance, operational risk, and cross-functional leadership.
Guests heard from the white paper authors, participated in a dynamic panel discussion moderated by Professor Mark Burdon, and explored how visual tools and observability technologies can enhance CPS 230 implementation.
Thank you to everyone who joined us at QUT Gardens Point for the Brisbane launch. You can explore the event recap and all downloadable resources below.
Who Should Explore These Resources
Whether you’re preparing your organisation for CPS 230, enhancing cross-functional collaboration, or looking for practical ways to bridge compliance and technology, this white paper provides valuable insights and recommendations.
These resources are designed for legal and compliance professionals, governance leads, technology experts, and executive leaders working across APRA-regulated organisations.
Get to Know the Event Speakers
Professor Huggins is an internationally recognised expert in digital regulation and compliance, and lead author of CPS 230 Digital Compliance and Observability. Her research focuses on innovative uses of technology for regulatory and compliance purposes. She currently leads an ARC Linkage Grant on digital compliance.
Mark is an expert in information privacy law and digital regulation. He is recognised internationally for his work on data governance and legal frameworks for emerging technologies.
Will brings almost two decades of experience in financial governance, audit, and regulatory compliance to his Non Executive Director roles. He currently serves on the boards and committees of RACQ Group, Children’s Health Queensland Hospital and Health Service, Opera Queensland, RFDS Qld, and TMR and chairs multiple Risk and Audit Committees. PwC alumni, he has advised ASX-listed companies and multinational clients.
Bernadette was appointed as Chief Information Officer at Great Southern Bank in February 2025 and leads the strategy, data, architecture and execution of the Technology and Enterprise Portfolio functions.
Bernadette brings a wealth of experience across different industries including transportation and mining, aviation and financial services. Most recently, Bernadette was part of the Group Executive of RACQ in the role of Chief Operating Officer where she held accountability for Technology, Data and Analytics and Group Projects and a year leading Contact Centre and Distribution functions. She has over 25 years in large scale business and technology transformation holding senior positions across several prominent Australian organisations including Chief Information Officer of Brisbane City Council, Business Transformation Lead for Virgin Australia, Aurizon, and Rio Tinto.
Harry is a cybersecurity and observability expert with over 28 years of experience supporting the financial services sector. At Splunk, he advises clients on leveraging observability to strengthen resilience, enhance risk visibility, and accelerate innovation. He brings a practical, technology-focused lens to CPS 230 compliance and digital transformation.
Stay Connected
The Brisbane launch was a key moment in a broader conversation about regulation, technology and cross-disciplinary collaboration. Explore the resources below to learn more.
Explore the Resources
The following resources are available for download to help your organisation engage with CPS 230 more effectively:
CPS 230 Digital Compliance and Observability
The complete research paper by authors from QUT and Royal Holloway, exploring a mapping-led approach to observability and operational resilience.
CPS 230 Executive Overview
A concise summary designed for decision-makers, highlighting key takeaways and implications for organisational compliance.
CPS 230 Operational Risk Management Activities Map
A high-level visual map grouping CPS 230 compliance activities into swimlanes and timelines aligned with four phases of operational resilience.
Best viewed on a desktop for full interactivity.
On a mobile device? Download the PDF and pinch to zoom for easy viewing.
CPS 230 and Observability Affordances Map
An overlay of observability tools onto the compliance map, highlighting where digital infrastructure can support CPS 230 compliance.
Best viewed on a desktop for full interactivity.
On a mobile device? Download the PDF and pinch to zoom for easy viewing.
Innovation Central Brisbane is proud to support collaborative, cross-sector research that drives meaningful impact for Australia’s digital future.
