M3 — Confirm

Controls, evidence, independence — regulator-defensible by default.

Every control has a named owner, an independent reviewer and an approver. Same-team overlaps are flagged automatically; blocking conflicts stop sign-off.

Controls in flight

Ready for evidence

Evidenced

Independence issues

JurisdictionAll UK EU US CA SG HK AU UAE GLOBAL

StatusAll Proposed In design In test Ready Evidenced Approved

Independence issues only

RAG	Control	Owner · Reviewer · Approver	Status	Evidence	Due
On track	EU-MICA-2026-C-009Check MiCA — control 9 EUMiCA — Whitepaper Filing Regime	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverAlex Novak· Retail Banking	Approved	1	8 Jul 26
At risk	EU-AI-ACT-FIN-2026-C-003 EU AI Act — control 3 EUEU AI Act — Financial Services Guidance	OwnerLena Kowalski· Wealth ReviewerNina Bergqvist· Retail Banking ApproverRohan Patel· Change	Approved	3	6 Aug 26
At risk	EU-T1-SETTLE-2027-C-001Check T+1 Settlement — control 1 EUT+1 Settlement — Final Rule	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverBen Carter· Regulatory Change	Approved	3	6 Sep 26
Not started	EU-DORA-3P-REGISTER-C-018 DORA — control 18 EUDORA — ICT Third-Party Register	OwnerYuki Tanaka· Operations ReviewerMarcus Lin· Risk ApproverChris Adeyemi· Executive	Evidenced	2	4 Jul 26
On track	EU-CSRD-2026-C-001Check CSRD — control 1 EUCSRD — Sustainability Reporting	OwnerDavid Okafor· Payments ReviewerArjun Menon· Payments ApproverAlex Novak· Retail Banking	Evidenced	3	4 Jul 26
On track	EU-CSRD-2026-C-004 CSRD — control 4 EUCSRD — Sustainability Reporting	OwnerLena Kowalski· Wealth ReviewerArjun Menon· Payments ApproverRohan Patel· Change	Evidenced	1	4 Jul 26
Not started	EU-AI-ACT-FIN-2026-C-001 EU AI Act — control 1 EUEU AI Act — Financial Services Guidance	OwnerAmelia Hart· Retail Banking ReviewerMarcus Lin· Risk ApproverRohan Patel· Change	Evidenced	2	11 Jul 26
Not started	EU-T1-SETTLE-2027-C-005 T+1 Settlement — control 5 EUT+1 Settlement — Final Rule	OwnerPriya Desai· Global Markets ReviewerTom Whitfield· Internal Audit ApproverChris Adeyemi· Executive	Evidenced	3	15 Jul 26
On track	EU-CSRD-2026-C-007 CSRD — control 7 EUCSRD — Sustainability Reporting	OwnerDavid Okafor· Payments ReviewerInes Silva· Legal ApproverBen Carter· Regulatory Change	Evidenced	1	21 Jul 26
On track	EU-DORA-3P-REGISTER-C-002 DORA — control 2 EUDORA — ICT Third-Party Register	OwnerPriya Desai· Global Markets ReviewerArjun Menon· Payments ApproverBen Carter· Regulatory Change	Evidenced	2	26 Jul 26
Off track	EU-T1-SETTLE-2027-C-009 T+1 Settlement — control 9 EUT+1 Settlement — Final Rule	OwnerLena Kowalski· Wealth ReviewerInes Silva· Legal ApproverBen Carter· Regulatory Change	Evidenced	3	3 Aug 26
On track	EU-DORA-3P-REGISTER-C-022 DORA — control 22 EUDORA — ICT Third-Party Register	OwnerLena Kowalski· Wealth ReviewerInes Silva· Legal ApproverBen Carter· Regulatory Change	Evidenced	3	4 Aug 26
At risk	EU-CSRD-2026-C-005 CSRD — control 5 EUCSRD — Sustainability Reporting	OwnerAmelia Hart· Retail Banking ReviewerTom Whitfield· Internal Audit ApproverBen Carter· Regulatory Change	Evidenced	2	6 Aug 26
Off track	EU-DORA-3P-REGISTER-C-015 DORA — control 15 EUDORA — ICT Third-Party Register	OwnerAmelia Hart· Retail Banking ReviewerMarcus Lin· Risk ApproverRohan Patel· Change	Evidenced	2	9 Aug 26
Off track	EU-AI-ACT-FIN-2026-C-005 EU AI Act — control 5 EUEU AI Act — Financial Services Guidance	OwnerDavid Okafor· Payments ReviewerMarcus Lin· Risk ApproverBen Carter· Regulatory Change	Evidenced	1	22 Aug 26
Off track	EU-MICA-2026-C-006 MiCA — control 6 EUMiCA — Whitepaper Filing Regime	OwnerDavid Okafor· Payments ReviewerTom Whitfield· Internal Audit ApproverChris Adeyemi· Executive	Evidenced	3	21 Sep 26
At risk	EU-DORA-3P-REGISTER-C-007 DORA — control 7 EUDORA — ICT Third-Party Register	OwnerAmelia Hart· Retail Banking ReviewerInes Silva· Legal ApproverRohan Patel· Change	Evidenced	2	21 Sep 26
At risk	EU-DORA-3P-REGISTER-C-019 DORA — control 19 EUDORA — ICT Third-Party Register	OwnerDavid Okafor· Payments ReviewerMarcus Lin· Risk ApproverAlex Novak· Retail Banking	In design	—	7 Jul 26
At risk	EU-T1-SETTLE-2027-C-007 T+1 Settlement — control 7 EUT+1 Settlement — Final Rule	OwnerDavid Okafor· Payments ReviewerTom Whitfield· Internal Audit ApproverBen Carter· Regulatory Change	In design	—	12 Jul 26
At risk	EU-DORA-3P-REGISTER-C-006 DORA — control 6 EUDORA — ICT Third-Party Register	OwnerPriya Desai· Global Markets ReviewerInes Silva· Legal ApproverBen Carter· Regulatory Change	In design	—	24 Jul 26
Not started	EU-T1-SETTLE-2027-C-008 T+1 Settlement — control 8 EUT+1 Settlement — Final Rule	OwnerLena Kowalski· Wealth ReviewerMarcus Lin· Risk ApproverAlex Novak· Retail Banking	In design	—	4 Aug 26
Off track	EU-MICA-2026-C-002 MiCA — control 2 EUMiCA — Whitepaper Filing Regime	OwnerAmelia Hart· Retail Banking ReviewerInes Silva· Legal ApproverBen Carter· Regulatory Change	In design	—	6 Aug 26
At risk	EU-DORA-3P-REGISTER-C-017 DORA — control 17 EUDORA — ICT Third-Party Register	OwnerYuki Tanaka· Operations ReviewerNina Bergqvist· Retail Banking ApproverRohan Patel· Change	In design	—	7 Aug 26
At risk	EU-T1-SETTLE-2027-C-002 T+1 Settlement — control 2 EUT+1 Settlement — Final Rule	OwnerPriya Desai· Global Markets ReviewerMarcus Lin· Risk ApproverAlex Novak· Retail Banking	In design	—	9 Aug 26
On track	EU-T1-SETTLE-2027-C-013 T+1 Settlement — control 13 EUT+1 Settlement — Final Rule	OwnerDavid Okafor· Payments ReviewerInes Silva· Legal ApproverChris Adeyemi· Executive	In design	—	10 Aug 26
Off track	EU-DORA-3P-REGISTER-C-011 DORA — control 11 EUDORA — ICT Third-Party Register	OwnerPriya Desai· Global Markets ReviewerMarcus Lin· Risk ApproverAlex Novak· Retail Banking	In design	—	11 Aug 26
At risk	EU-T1-SETTLE-2027-C-004 T+1 Settlement — control 4 EUT+1 Settlement — Final Rule	OwnerYuki Tanaka· Operations ReviewerNina Bergqvist· Retail Banking ApproverRohan Patel· Change	In design	—	11 Aug 26
Off track	EU-DORA-3P-REGISTER-C-021Check DORA — control 21 EUDORA — ICT Third-Party Register	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverChris Adeyemi· Executive	In design	—	18 Aug 26
At risk	EU-MICA-2026-C-004Check MiCA — control 4 EUMiCA — Whitepaper Filing Regime	OwnerDavid Okafor· Payments ReviewerArjun Menon· Payments ApproverAlex Novak· Retail Banking	In design	—	20 Aug 26
At risk	EU-DORA-3P-REGISTER-C-008Check DORA — control 8 EUDORA — ICT Third-Party Register	OwnerLena Kowalski· Wealth ReviewerNina Bergqvist· Retail Banking ApproverAlex Novak· Retail Banking	In design	—	22 Aug 26
At risk	EU-MICA-2026-C-008 MiCA — control 8 EUMiCA — Whitepaper Filing Regime	OwnerPriya Desai· Global Markets ReviewerInes Silva· Legal ApproverAlex Novak· Retail Banking	In design	—	23 Aug 26
At risk	EU-T1-SETTLE-2027-C-011 T+1 Settlement — control 11 EUT+1 Settlement — Final Rule	OwnerAmelia Hart· Retail Banking ReviewerTom Whitfield· Internal Audit ApproverRohan Patel· Change	In design	—	25 Aug 26
Off track	EU-MICA-2026-C-014 MiCA — control 14 EUMiCA — Whitepaper Filing Regime	OwnerDavid Okafor· Payments ReviewerNina Bergqvist· Retail Banking ApproverBen Carter· Regulatory Change	In design	—	27 Aug 26
At risk	EU-DORA-3P-REGISTER-C-012 DORA — control 12 EUDORA — ICT Third-Party Register	OwnerYuki Tanaka· Operations ReviewerTom Whitfield· Internal Audit ApproverChris Adeyemi· Executive	In design	—	28 Aug 26
At risk	EU-DORA-3P-REGISTER-C-020 DORA — control 20 EUDORA — ICT Third-Party Register	OwnerAmelia Hart· Retail Banking ReviewerInes Silva· Legal ApproverRohan Patel· Change	In design	—	30 Aug 26
Not started	EU-MICA-2026-C-007Check MiCA — control 7 EUMiCA — Whitepaper Filing Regime	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverBen Carter· Regulatory Change	In design	—	1 Sep 26
At risk	EU-AI-ACT-FIN-2026-C-002 EU AI Act — control 2 EUEU AI Act — Financial Services Guidance	OwnerDavid Okafor· Payments ReviewerMarcus Lin· Risk ApproverAlex Novak· Retail Banking	In design	—	1 Sep 26
At risk	EU-T1-SETTLE-2027-C-003 T+1 Settlement — control 3 EUT+1 Settlement — Final Rule	OwnerYuki Tanaka· Operations ReviewerInes Silva· Legal ApproverChris Adeyemi· Executive	In design	—	4 Sep 26
At risk	EU-MICA-2026-C-001Check MiCA — control 1 EUMiCA — Whitepaper Filing Regime	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverChris Adeyemi· Executive	In design	—	9 Sep 26
Off track	EU-MICA-2026-C-005 MiCA — control 5 EUMiCA — Whitepaper Filing Regime	OwnerPriya Desai· Global Markets ReviewerTom Whitfield· Internal Audit ApproverRohan Patel· Change	In design	—	11 Sep 26
Off track	EU-MICA-2026-C-011 MiCA — control 11 EUMiCA — Whitepaper Filing Regime	OwnerAmelia Hart· Retail Banking ReviewerTom Whitfield· Internal Audit ApproverChris Adeyemi· Executive	In design	—	11 Sep 26
At risk	EU-DORA-3P-REGISTER-C-003 DORA — control 3 EUDORA — ICT Third-Party Register	OwnerPriya Desai· Global Markets ReviewerNina Bergqvist· Retail Banking ApproverRohan Patel· Change	In test	—	12 Jul 26
Off track	EU-DORA-3P-REGISTER-C-009 DORA — control 9 EUDORA — ICT Third-Party Register	OwnerAmelia Hart· Retail Banking ReviewerMarcus Lin· Risk ApproverChris Adeyemi· Executive	In test	—	28 Jul 26
At risk	EU-DORA-3P-REGISTER-C-001 DORA — control 1 EUDORA — ICT Third-Party Register	OwnerLena Kowalski· Wealth ReviewerMarcus Lin· Risk ApproverAlex Novak· Retail Banking	In test	—	8 Aug 26
At risk	EU-AI-ACT-FIN-2026-C-004 EU AI Act — control 4 EUEU AI Act — Financial Services Guidance	OwnerDavid Okafor· Payments ReviewerInes Silva· Legal ApproverChris Adeyemi· Executive	In test	—	11 Aug 26
Off track	EU-T1-SETTLE-2027-C-006 T+1 Settlement — control 6 EUT+1 Settlement — Final Rule	OwnerYuki Tanaka· Operations ReviewerTom Whitfield· Internal Audit ApproverChris Adeyemi· Executive	In test	—	14 Aug 26
Not started	EU-DORA-3P-REGISTER-C-005 DORA — control 5 EUDORA — ICT Third-Party Register	OwnerYuki Tanaka· Operations ReviewerNina Bergqvist· Retail Banking ApproverBen Carter· Regulatory Change	In test	—	18 Aug 26
On track	EU-CSRD-2026-C-003 CSRD — control 3 EUCSRD — Sustainability Reporting	OwnerPriya Desai· Global Markets ReviewerArjun Menon· Payments ApproverRohan Patel· Change	In test	—	25 Aug 26
On track	EU-CSRD-2026-C-008 CSRD — control 8 EUCSRD — Sustainability Reporting	OwnerDavid Okafor· Payments ReviewerTom Whitfield· Internal Audit ApproverChris Adeyemi· Executive	In test	—	25 Aug 26
Not started	EU-DORA-3P-REGISTER-C-016 DORA — control 16 EUDORA — ICT Third-Party Register	OwnerDavid Okafor· Payments ReviewerTom Whitfield· Internal Audit ApproverBen Carter· Regulatory Change	In test	—	31 Aug 26
On track	EU-DORA-3P-REGISTER-C-010 DORA — control 10 EUDORA — ICT Third-Party Register	OwnerDavid Okafor· Payments ReviewerMarcus Lin· Risk ApproverChris Adeyemi· Executive	In test	—	3 Sep 26
At risk	EU-DORA-3P-REGISTER-C-004 DORA — control 4 EUDORA — ICT Third-Party Register	OwnerYuki Tanaka· Operations ReviewerTom Whitfield· Internal Audit ApproverRohan Patel· Change	In test	—	7 Sep 26
On track	EU-CSRD-2026-C-002 CSRD — control 2 EUCSRD — Sustainability Reporting	OwnerYuki Tanaka· Operations ReviewerTom Whitfield· Internal Audit ApproverRohan Patel· Change	In test	—	22 Sep 26
On track	EU-T1-SETTLE-2027-C-014 T+1 Settlement — control 14 EUT+1 Settlement — Final Rule	OwnerLena Kowalski· Wealth ReviewerMarcus Lin· Risk ApproverChris Adeyemi· Executive	In test	—	29 Sep 26
Off track	EU-MICA-2026-C-013 MiCA — control 13 EUMiCA — Whitepaper Filing Regime	OwnerLena Kowalski· Wealth ReviewerArjun Menon· Payments ApproverBen Carter· Regulatory Change	Proposed	—	5 Aug 26
On track	EU-T1-SETTLE-2027-C-012 T+1 Settlement — control 12 EUT+1 Settlement — Final Rule	OwnerYuki Tanaka· Operations ReviewerTom Whitfield· Internal Audit ApproverRohan Patel· Change	Proposed	—	8 Sep 26
At risk	EU-MICA-2026-C-010 MiCA — control 10 EUMiCA — Whitepaper Filing Regime	OwnerDavid Okafor· Payments ReviewerMarcus Lin· Risk ApproverRohan Patel· Change	Proposed	—	23 Sep 26
Not started	EU-DORA-3P-REGISTER-C-014 DORA — control 14 EUDORA — ICT Third-Party Register	OwnerYuki Tanaka· Operations ReviewerTom Whitfield· Internal Audit ApproverChris Adeyemi· Executive	Ready	2	16 Jul 26
At risk	EU-T1-SETTLE-2027-C-010 T+1 Settlement — control 10 EUT+1 Settlement — Final Rule	OwnerYuki Tanaka· Operations ReviewerTom Whitfield· Internal Audit ApproverChris Adeyemi· Executive	Ready	2	23 Jul 26
Off track	EU-MICA-2026-C-003Check MiCA — control 3 EUMiCA — Whitepaper Filing Regime	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverBen Carter· Regulatory Change	Ready	3	30 Jul 26
Not started	EU-DORA-3P-REGISTER-C-013 DORA — control 13 EUDORA — ICT Third-Party Register	OwnerDavid Okafor· Payments ReviewerMarcus Lin· Risk ApproverBen Carter· Regulatory Change	Ready	3	11 Sep 26
At risk	EU-CSRD-2026-C-006 CSRD — control 6 EUCSRD — Sustainability Reporting	OwnerLena Kowalski· Wealth ReviewerInes Silva· Legal ApproverChris Adeyemi· Executive	Ready	1	15 Sep 26
Not started	EU-MICA-2026-C-012Check MiCA — control 12 EUMiCA — Whitepaper Filing Regime	OwnerLena Kowalski· Wealth ReviewerNina Bergqvist· Retail Banking ApproverAlex Novak· Retail Banking	Ready	3	23 Sep 26

Showing up to 80 controls. Filter by jurisdiction, status or independence to narrow.