M3 — Confirm

Controls, evidence, independence — regulator-defensible by default.

Every control has a named owner, an independent reviewer and an approver. Same-team overlaps are flagged automatically; blocking conflicts stop sign-off.

Controls in flight

Ready for evidence

Evidenced

Independence issues

JurisdictionAll UK EU US CA SG HK AU UAE GLOBAL

StatusAll Proposed In design In test Ready Evidenced Approved

Independence issues only

RAG	Control	Owner · Reviewer · Approver	Status	Evidence	Due
At risk	AU-APRA-CPS-230-2026-C-001Check APRA CPS 230 — control 1 AUAPRA CPS 230 — Operational Risk Management	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverRohan Patel· Change	In design	—	25 Sep 26

Showing up to 80 controls. Filter by jurisdiction, status or independence to narrow.