M3 — Confirm

Controls, evidence, independence — regulator-defensible by default.

Every control has a named owner, an independent reviewer and an approver. Same-team overlaps are flagged automatically; blocking conflicts stop sign-off.

Controls in flight

Ready for evidence

Evidenced

Independence issues

JurisdictionAll UK EU US CA SG HK AU UAE GLOBAL

StatusAll Proposed In design In test Ready Evidenced Approved

Independence issues only

RAG	Control	Owner · Reviewer · Approver	Status	Evidence	Due
Not started	HMT-CRYPTO-2026-C-002Check HMT Cryptoasset Regime — control 2 UKHMT Cryptoasset Regime — Perimeter	OwnerDavid Okafor· Payments ReviewerNina Bergqvist· Retail Banking ApproverAlex Novak· Retail Banking	In test	—	18 Jul 26
On track	PRA-OP-RES-2026-C-006Check Operational Resilience — control 6 UKOperational Resilience — Impact Tolerances Refresh	OwnerDavid Okafor· Payments ReviewerNina Bergqvist· Retail Banking ApproverAlex Novak· Retail Banking	In test	—	26 Jul 26
On track	HMT-CRYPTO-2026-C-001Check HMT Cryptoasset Regime — control 1 UKHMT Cryptoasset Regime — Perimeter	OwnerDavid Okafor· Payments ReviewerArjun Menon· Payments ApproverRohan Patel· Change	In test	—	10 Aug 26
On track	HK-SFC-VA-2026-C-001Check SFC Virtual Asset Licensing Regime — control 1 HKSFC Virtual Asset Licensing Regime	OwnerDavid Okafor· Payments ReviewerArjun Menon· Payments ApproverAlex Novak· Retail Banking	In test	—	4 Sep 26

Showing up to 80 controls. Filter by jurisdiction, status or independence to narrow.