APRA's System Risk Outlook - November 2026

It creates no new obligations, but it is a reliable leading indicator of where thematic reviews, data requests and board-level engagement will concentrate. What this means for compliance teams: anticipate internal audit, risk and board papers citing the Outlook's priority themes — concentration and interconnectedness risk, funding and liquidity resilience, deteriorating credit quality in a higher-for-longer rate environment, operational and cyber disruption, critical third-party and technology dependency, and the prudential treatment of emerging exposures such as digital assets and climate-related financial risk. For UK and international groups with Australian subsidiaries, branches or counterparties, the Outlook also shapes how local prudential expectations may diverge from home-state supervision.

Actions needed: (1) map the Outlook's themes against your ICAAP, recovery and resolution planning and scenario libraries, and evidence any gaps; (2) refresh stress-testing assumptions to reflect regulator-articulated vulnerabilities rather than historical averages; (3) confirm board and risk committee oversight of concentration, liquidity and operational resilience exposures; (4) brief senior management now, so that evidence of assessment is available before thematic information requests arrive; (5) track the Outlook as a standing input to supervisory engagement planning and forward-looking risk appetite calibration. Firms that treat it as an early-warning agenda rather than background reading will be better positioned when formal expectations follow.