8 July 2026
Tyro EFTPOS
terminals across ~80,000 businesses
Payments
Trains
000 calls
a network carrying ≈ 25 million services · down most of a business day
figures: public reporting, 8–9 July 2026
✓ figures verified 15 Jul 2026 — SBS · The Register · SmartCompany
  • A nationwide Telstra outage — a network carrying roughly 25 million services, down for most of a business day.
  • EFTPOS failing at Tyro terminals across ~80,000 businesses. Payments, trains and 000 calls disrupted.
  • Every member with 4G-dependent EFTPOS, branch comms or ATM links was in a live continuity event.

Could you have pulled your plan in one click?

Certe
01
The deadline

CPS 230 is no longer coming. It's here.

  • APRA CPS 230 — operational risk management — took effect 1 July 2025.
  • Non-SFIs' extra 12 months — covering the business continuity and scenario analysis requirements — ended 1 July 2026.
  • The standard reads like it was written for a risk department. Most institutions this size run a one- or two-person risk function.
1 July 2025 CPS 230 effective 1 July 2026 non-SFI deferral ends business continuity & scenario analysis 8 July — Telstra outage TODAY
It expects BCP for critical operations Tolerance levels Testing Material service provider risk
Certe
02
Continuity — the acute pain first

A live continuity system, not scattered plans on paper.

  • A plan you can act on in minutes.
  • Every critical function: who's responsible, the maximum outage you can tolerate, instructions, contingency, contacts.
  • Maps to what CPS 230 asks of you: critical operations, tolerance levels, an actionable response.
  • Lives in the cloud, outside your systems — when they go down, the plan doesn't go with them.1
¹ Hosted on AWS in Sydney (ap-southeast-2) — encryption at rest, daily encrypted backups, and high availability with replication across data centres. Cybersecurity and technical disclosure is available upon request — or visit certe.net.au for more information.
Certe continuity visual view — colour-coded critical function cards with MAO
your tolerance level, on the record —
MAO < 4 hours · real-time payments (NPP/Osko)
Certe
03
The frame

One system, four obligations.

  • What's our operational risk profile? → Risk
  • Are audit findings and board actions being remediated? → Actions
  • Who is authorised to approve what? → Delegations
  • Can we maintain critical operations through disruption? → Continuity ✓ just shown
One platform, one look, one home screen — shared per document with your directors, and live in the meeting itself.
What's our operational risk profile?RISK
Are findings being remediated?ACTIONS
Who can approve what?DELEGATIONS
Critical operations through disruption?CONTINUITY ✓
Board Reporting
Certe dashboard tab strip crop — all four document types
all four document types — one home screen, one tab filter
Certe
04
1
Risk · What's our operational risk profile?

Your risk profile — evidenced, not asserted.

  • A living register across credit, liquidity, operational, compliance, technology and conduct risk.
  • Every risk rated twice: inherent, then residual after controls — calculated for you.
  • Controls typed and rated for effectiveness — a self-assessment your board can see and challenge, and your internal audit can test.
Evidence, not spreadsheets.
A guided seven-step method with coaching at each step — built for a two-person risk function, not a risk department.
Certe risk chart — layered inherent and residual rating cards by category
back layer = inherent · front = residual
HIGH → MEDIUM after controls
Risk register report page crop — inherent and residual rating columns
↳ inherent & residual, side by side — from the board report
Certe
05
2
Actions · Are findings being remediated?

Every finding, remediated on the record.

  • One inventory of actions from internal audit, external audit, prudential reviews and board meetings.
  • Owner, due date — and revised due date. Slippage is visible, not buried.
  • Progress the board reads at a glance; update it in the meeting itself.
  • Remediation evidence, ready for your next review. Nothing retyped into a status paper.
Certe action management — detailed view grouped by source with completion bars
findings tracked at the source —
audit, review, board
slippage on the record —
original 15/08 · revised 12/09
Wattlegrove Mutual Bank — fictional demonstration data
Certe
06
3
Delegations · Who can approve what?

Authority on the record — not in people's heads.

  • A searchable delegations manual, not a policy nobody opens.
  • Graduated dollar thresholds by role — branch manager to board, no grey areas.
  • Pivot by authority: everything reserved for the board, on one page.
  • When your one risk person is on leave, the knowledge stays.
Three views: Main · Category · Authorities
Certe delegations manual — graduated authority ladder
$50K → $250K → $1M →
Board: Unlimited
Certe
07
✦ The answer to the capacity gap

AI-assisted drafting.
Always human-⁠reviewed.

  • Complete a short profile of your bank; AI drafts services, critical functions and recovery narratives.
  • A reviewable continuity draft in hours — instead of weeks of drafting.
  • Every suggestion is accepted, edited or rejected by your people before anything is saved.
  • One organisation-wide AI switch, controlled by you, enforced at the server. Off means off.
  • All Certe AI is in-house and on-prem — Certe's own models on Certe's own infrastructure. No third-party AI services.*
In Continuity today; extending across modules is on the roadmap.
Certe Create with AI wizard — step 2, accept or edit suggestions with include/exclude checkboxes
every item individually accepted or rejected —
note the one left out
organisation-level AI on/off
when disabled, blocked at the server
* On-premises deployment of Certe — including its AI services — is available for client organisations.
Certe
08
The payoff

Evidence that stands up to internal audit and APRA review.

  • Board packs generated straight from live data — covers, titles, dated. Nothing retyped into Word.
  • Named snapshots preserve a dated, point-in-time version: “Q2 2026 Board Meeting — 30 June 2026.”1
  • Report from any historical snapshot — evidence of exactly what the board saw, and when.
  • Share it read-only with your auditor or a regulator — domain-restricted, PIN-verified, revocable.
Certe snapshots — named point-in-time versions with dates and attribution
¹ Data is retained as per Australian cybersecurity standards and remains available for ejection or export at the organisation's request — including after the subscription ends. Guest links apply to continuity plans; other documents are shared by inviting read-only viewers.
↳ named, dated, attributed — and any snapshot regenerates its report
↳ note the “APRA CPS 230 Self-Assessment evidence” snapshot
Certe board report — branded cover and risk register page
Certe
09
Certe MSN Standard Edition (proposed)

You populate. You don't build.

  • Risk register — the six categories a small mutual actually runs, with mutual-bank consequence and likelihood definitions.
  • Continuity templates — core banking · telco/payments · cyber · key-person · branch loss.
  • Delegations ladders — board to branch.
  • One common format — raises the floor for every member; benchmark yourself against peers, while your data stays yours, visible only to you.
Risk register
6 mutual-bank categoriesconsequence & likelihood definitions
Continuity templates
core bankingtelco / paymentscyberkey-personbranch loss
Delegations ladders
board → branch
Certe
MSN Standard Edition
proposed
Proposed — to be shaped with member and practitioner input before anything is fixed.
◆ Pedigree — founded by Peter O'Callaghan, 35+ years advising boards of small regulated organisations ⬢ Security — organisation-enforced multi-factor authentication
Certe
10
Collective procurement

One deal, not 25.

  • Procured collectively through the Mutual Support Network, under its ACCC collective bargaining notification.
  • One negotiation. One standard edition. Proposed: pooled pricing — one floor for every member.
  • Enterprise-grade governance at small-entity pricing — a subscription sized for small organisations. Current pricing: certe.net.au/pricing1
  • Not an implementation project: the pilot is built to have you producing a live board pack inside the first month.
25 DEALS 25 negotiations · 25 setups · 25 price points ONE DEAL MSN Certe MSN Standard Edition one negotiation · one standard edition pooled pricing (proposed)
1

Demo

See the MSN Standard Edition working on Wattlegrove sample data.

2

Populate

Load your own risks, actions, delegations and continuity data — populate, don't build.

3

Board pack — month one

A live board pack produced inside the first month.

¹ Enterprise pricing options are available, with special exceptions for small organisations, charities and not-for-profits.
Certe
11
The invitation

See it on your own numbers.

  • Start with a short working session, pre-loaded with a starter register, continuity templates and delegations for a mutual like yours.
  • React to something real, let us help you build: the risk chart, continuity plan and board pack shown here, on your own numbers.
Reach out — or see more atcerte.net.au
Peter O'Callaghan — Founder, Certe
Operational risk profileRISK ✓
Findings remediatedACTIONS ✓
Who approves whatDELEGATIONS ✓
Critical operationsCONTINUITY ✓
Board Reporting
Continuity
Risk
Board pack
Certe
12
← → navigate · N notes · P print · Esc menu
Speaker notes