In addition, APRA will advance operational risk management requirements when engaging in cryptographic activities in areas such as control effectiveness, business continuity, and service provider management. Draft standards will be released in the coming months.