M3 — Confirm

Controls, evidence, independence — regulator-defensible by default.

Every control has a named owner, an independent reviewer and an approver. Same-team overlaps are flagged automatically; blocking conflicts stop sign-off.

Controls in flight

Ready for evidence

Evidenced

Independence issues

JurisdictionAll UK EU US CA SG HK AU UAE GLOBAL

StatusAll Proposed In design In test Ready Evidenced Approved

Independence issues only

RAG	Control	Owner · Reviewer · Approver	Status	Evidence	Due
Not started	AU-ASIC-DDO-2026-C-003 ASIC DDO — control 3 AUASIC DDO — Target Market Determinations	OwnerPriya Desai· Global Markets ReviewerNina Bergqvist· Retail Banking ApproverBen Carter· Regulatory Change	Evidenced	—	16 Sep 26
Off track	AU-APRA-CPS-230-2026-C-008 APRA CPS 230 — control 8 AUAPRA CPS 230 — Operational Risk Management	OwnerYuki Tanaka· Operations ReviewerTom Whitfield· Internal Audit ApproverRohan Patel· Change	In design	—	19 Aug 26
At risk	AU-APRA-CPS-230-2026-C-010 APRA CPS 230 — control 10 AUAPRA CPS 230 — Operational Risk Management	OwnerPriya Desai· Global Markets ReviewerArjun Menon· Payments ApproverChris Adeyemi· Executive	In design	—	10 Sep 26
Off track	AU-APRA-CPS-230-2026-C-006 APRA CPS 230 — control 6 AUAPRA CPS 230 — Operational Risk Management	OwnerLena Kowalski· Wealth ReviewerTom Whitfield· Internal Audit ApproverRohan Patel· Change	In design	—	12 Sep 26
At risk	AU-APRA-CPS-230-2026-C-001Check APRA CPS 230 — control 1 AUAPRA CPS 230 — Operational Risk Management	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverRohan Patel· Change	In design	—	25 Sep 26
Off track	AU-APRA-CPS-230-2026-C-005 APRA CPS 230 — control 5 AUAPRA CPS 230 — Operational Risk Management	OwnerYuki Tanaka· Operations ReviewerInes Silva· Legal ApproverRohan Patel· Change	In test	—	4 Jul 26
Off track	AU-APRA-CPS-230-2026-C-007 APRA CPS 230 — control 7 AUAPRA CPS 230 — Operational Risk Management	OwnerAmelia Hart· Retail Banking ReviewerArjun Menon· Payments ApproverBen Carter· Regulatory Change	In test	—	11 Jul 26
Off track	AU-APRA-CPS-230-2026-C-009 APRA CPS 230 — control 9 AUAPRA CPS 230 — Operational Risk Management	OwnerLena Kowalski· Wealth ReviewerArjun Menon· Payments ApproverAlex Novak· Retail Banking	In test	—	22 Jul 26
At risk	AU-ASIC-DDO-2026-C-001 ASIC DDO — control 1 AUASIC DDO — Target Market Determinations	OwnerYuki Tanaka· Operations ReviewerInes Silva· Legal ApproverChris Adeyemi· Executive	In test	—	14 Aug 26
Off track	AU-APRA-CPS-230-2026-C-002Check APRA CPS 230 — control 2 AUAPRA CPS 230 — Operational Risk Management	OwnerSarah Reynolds· Compliance ReviewerNina Bergqvist· Retail Banking ApproverAlex Novak· Retail Banking	Ready	—	9 Jul 26
At risk	AU-ASIC-DDO-2026-C-002 ASIC DDO — control 2 AUASIC DDO — Target Market Determinations	OwnerPriya Desai· Global Markets ReviewerMarcus Lin· Risk ApproverChris Adeyemi· Executive	Ready	—	1 Aug 26
Off track	AU-APRA-CPS-230-2026-C-003Check APRA CPS 230 — control 3 AUAPRA CPS 230 — Operational Risk Management	OwnerDavid Okafor· Payments ReviewerArjun Menon· Payments ApproverRohan Patel· Change	Ready	—	27 Aug 26
Off track	AU-APRA-CPS-230-2026-C-004Blocked APRA CPS 230 — control 4 AUAPRA CPS 230 — Operational Risk Management	OwnerPriya Desai· Global Markets ReviewerPriya Desai· Global Markets ApproverChris Adeyemi· Executive	Ready	—	5 Sep 26
At risk	AU-ASIC-DDO-2026-C-004 ASIC DDO — control 4 AUASIC DDO — Target Market Determinations	OwnerAmelia Hart· Retail Banking ReviewerInes Silva· Legal ApproverBen Carter· Regulatory Change	Ready	—	8 Sep 26

Showing up to 80 controls. Filter by jurisdiction, status or independence to narrow.