M3 — Confirm

Controls, evidence, independence — regulator-defensible by default.

Every control has a named owner, an independent reviewer and an approver. Same-team overlaps are flagged automatically; blocking conflicts stop sign-off.

Controls in flight

Ready for evidence

Evidenced

Independence issues

JurisdictionAll UK EU US CA SG HK AU UAE GLOBAL

StatusAll Proposed In design In test Ready Evidenced Approved

Independence issues only

RAG	Control	Owner · Reviewer · Approver	Status	Evidence	Due
On track	EU-MICA-2026-C-009Check MiCA — control 9 EUMiCA — Whitepaper Filing Regime	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverAlex Novak· Retail Banking	Approved	1	8 Jul 26
On track	MAS-EDDR-2026-C-001Check MAS Enhanced Due Diligence Rules — control 1 SGMAS Enhanced Due Diligence Rules — VA	OwnerDavid Okafor· Payments ReviewerArjun Menon· Payments ApproverAlex Novak· Retail Banking	Approved	—	14 Aug 26
At risk	UAE-DFSA-CRYPTO-2026-C-005Check DFSA Crypto Token Regime — control 5 UAEDFSA Crypto Token Regime — Phase 2	OwnerDavid Okafor· Payments ReviewerArjun Menon· Payments ApproverChris Adeyemi· Executive	Approved	—	15 Aug 26
At risk	EU-T1-SETTLE-2027-C-001Check T+1 Settlement — control 1 EUT+1 Settlement — Final Rule	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverBen Carter· Regulatory Change	Approved	3	6 Sep 26
On track	EU-CSRD-2026-C-001Check CSRD — control 1 EUCSRD — Sustainability Reporting	OwnerDavid Okafor· Payments ReviewerArjun Menon· Payments ApproverAlex Novak· Retail Banking	Evidenced	3	4 Jul 26
On track	PRA-OP-RES-2026-C-003Check Operational Resilience — control 3 UKOperational Resilience — Impact Tolerances Refresh	OwnerDavid Okafor· Payments ReviewerArjun Menon· Payments ApproverRohan Patel· Change	Evidenced	3	4 Aug 26
Off track	MAS-OR-TRM-2026-C-003Check MAS Technology Risk Management Guidelines Update — control 3 SGMAS Technology Risk Management Guidelines Update	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverChris Adeyemi· Executive	Evidenced	—	13 Sep 26
At risk	US-SEC-CYBER-2026-C-004Check SEC Cyber Incident Disclosure Rule — control 4 USSEC Cyber Incident Disclosure Rule	OwnerLena Kowalski· Wealth ReviewerNina Bergqvist· Retail Banking ApproverAlex Novak· Retail Banking	In design	—	8 Aug 26
Off track	FCA-CONSUMER-DUTY-2026-C-001Check Consumer Duty — control 1 UKConsumer Duty — Annual Board Report	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverAlex Novak· Retail Banking	In design	—	18 Aug 26
Off track	EU-DORA-3P-REGISTER-C-021Check DORA — control 21 EUDORA — ICT Third-Party Register	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverChris Adeyemi· Executive	In design	—	18 Aug 26
At risk	EU-MICA-2026-C-004Check MiCA — control 4 EUMiCA — Whitepaper Filing Regime	OwnerDavid Okafor· Payments ReviewerArjun Menon· Payments ApproverAlex Novak· Retail Banking	In design	—	20 Aug 26
At risk	EU-DORA-3P-REGISTER-C-008Check DORA — control 8 EUDORA — ICT Third-Party Register	OwnerLena Kowalski· Wealth ReviewerNina Bergqvist· Retail Banking ApproverAlex Novak· Retail Banking	In design	—	22 Aug 26
Off track	MAS-OR-TRM-2026-C-005Check MAS Technology Risk Management Guidelines Update — control 5 SGMAS Technology Risk Management Guidelines Update	OwnerPriya Desai· Global Markets ReviewerNina Bergqvist· Retail Banking ApproverAlex Novak· Retail Banking	In design	—	27 Aug 26
Not started	EU-MICA-2026-C-007Check MiCA — control 7 EUMiCA — Whitepaper Filing Regime	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverBen Carter· Regulatory Change	In design	—	1 Sep 26
At risk	EU-MICA-2026-C-001Check MiCA — control 1 EUMiCA — Whitepaper Filing Regime	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverChris Adeyemi· Executive	In design	—	9 Sep 26
At risk	AU-APRA-CPS-230-2026-C-001Check APRA CPS 230 — control 1 AUAPRA CPS 230 — Operational Risk Management	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverRohan Patel· Change	In design	—	25 Sep 26
Not started	HMT-CRYPTO-2026-C-002Check HMT Cryptoasset Regime — control 2 UKHMT Cryptoasset Regime — Perimeter	OwnerDavid Okafor· Payments ReviewerNina Bergqvist· Retail Banking ApproverAlex Novak· Retail Banking	In test	—	18 Jul 26
On track	PRA-OP-RES-2026-C-006Check Operational Resilience — control 6 UKOperational Resilience — Impact Tolerances Refresh	OwnerDavid Okafor· Payments ReviewerNina Bergqvist· Retail Banking ApproverAlex Novak· Retail Banking	In test	—	26 Jul 26
On track	HMT-CRYPTO-2026-C-001Check HMT Cryptoasset Regime — control 1 UKHMT Cryptoasset Regime — Perimeter	OwnerDavid Okafor· Payments ReviewerArjun Menon· Payments ApproverRohan Patel· Change	In test	—	10 Aug 26
On track	HK-SFC-VA-2026-C-001Check SFC Virtual Asset Licensing Regime — control 1 HKSFC Virtual Asset Licensing Regime	OwnerDavid Okafor· Payments ReviewerArjun Menon· Payments ApproverAlex Novak· Retail Banking	In test	—	4 Sep 26
Not started	HK-HKMA-TECH-2026-C-004Check HKMA Cyber Resilience Assessment Framework — control 4 HKHKMA Cyber Resilience Assessment Framework	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverChris Adeyemi· Executive	Proposed	—	23 Sep 26
Off track	AU-APRA-CPS-230-2026-C-002Check APRA CPS 230 — control 2 AUAPRA CPS 230 — Operational Risk Management	OwnerSarah Reynolds· Compliance ReviewerNina Bergqvist· Retail Banking ApproverAlex Novak· Retail Banking	Ready	—	9 Jul 26
Off track	EU-MICA-2026-C-003Check MiCA — control 3 EUMiCA — Whitepaper Filing Regime	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverBen Carter· Regulatory Change	Ready	3	30 Jul 26
Off track	AU-APRA-CPS-230-2026-C-003Check APRA CPS 230 — control 3 AUAPRA CPS 230 — Operational Risk Management	OwnerDavid Okafor· Payments ReviewerArjun Menon· Payments ApproverRohan Patel· Change	Ready	—	27 Aug 26
Off track	AU-APRA-CPS-230-2026-C-004Blocked APRA CPS 230 — control 4 AUAPRA CPS 230 — Operational Risk Management	OwnerPriya Desai· Global Markets ReviewerPriya Desai· Global Markets ApproverChris Adeyemi· Executive	Ready	—	5 Sep 26
On track	US-OCC-3P-RISK-2026-C-001Check OCC Third-Party Risk Management Guidance — control 1 USOCC Third-Party Risk Management Guidance	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverRohan Patel· Change	Ready	2	10 Sep 26
Not started	EU-MICA-2026-C-012Check MiCA — control 12 EUMiCA — Whitepaper Filing Regime	OwnerLena Kowalski· Wealth ReviewerNina Bergqvist· Retail Banking ApproverAlex Novak· Retail Banking	Ready	3	23 Sep 26

Showing up to 80 controls. Filter by jurisdiction, status or independence to narrow.