M3 — Confirm

Controls, evidence, independence — regulator-defensible by default.

Every control has a named owner, an independent reviewer and an approver. Same-team overlaps are flagged automatically; blocking conflicts stop sign-off.

Controls in flight

Ready for evidence

Evidenced

Independence issues

JurisdictionAll UK EU US CA SG HK AU UAE GLOBAL

StatusAll Proposed In design In test Ready Evidenced Approved

Independence issues only

RAG	Control	Owner · Reviewer · Approver	Status	Evidence	Due
At risk	EU-DORA-3P-REGISTER-C-003 DORA — control 3 EUDORA — ICT Third-Party Register	OwnerPriya Desai· Global Markets ReviewerNina Bergqvist· Retail Banking ApproverRohan Patel· Change	In test	—	12 Jul 26
Off track	EU-DORA-3P-REGISTER-C-009 DORA — control 9 EUDORA — ICT Third-Party Register	OwnerAmelia Hart· Retail Banking ReviewerMarcus Lin· Risk ApproverChris Adeyemi· Executive	In test	—	28 Jul 26
At risk	EU-DORA-3P-REGISTER-C-001 DORA — control 1 EUDORA — ICT Third-Party Register	OwnerLena Kowalski· Wealth ReviewerMarcus Lin· Risk ApproverAlex Novak· Retail Banking	In test	—	8 Aug 26
At risk	EU-AI-ACT-FIN-2026-C-004 EU AI Act — control 4 EUEU AI Act — Financial Services Guidance	OwnerDavid Okafor· Payments ReviewerInes Silva· Legal ApproverChris Adeyemi· Executive	In test	—	11 Aug 26
Off track	EU-T1-SETTLE-2027-C-006 T+1 Settlement — control 6 EUT+1 Settlement — Final Rule	OwnerYuki Tanaka· Operations ReviewerTom Whitfield· Internal Audit ApproverChris Adeyemi· Executive	In test	—	14 Aug 26
Not started	EU-DORA-3P-REGISTER-C-005 DORA — control 5 EUDORA — ICT Third-Party Register	OwnerYuki Tanaka· Operations ReviewerNina Bergqvist· Retail Banking ApproverBen Carter· Regulatory Change	In test	—	18 Aug 26
On track	EU-CSRD-2026-C-003 CSRD — control 3 EUCSRD — Sustainability Reporting	OwnerPriya Desai· Global Markets ReviewerArjun Menon· Payments ApproverRohan Patel· Change	In test	—	25 Aug 26
On track	EU-CSRD-2026-C-008 CSRD — control 8 EUCSRD — Sustainability Reporting	OwnerDavid Okafor· Payments ReviewerTom Whitfield· Internal Audit ApproverChris Adeyemi· Executive	In test	—	25 Aug 26
Not started	EU-DORA-3P-REGISTER-C-016 DORA — control 16 EUDORA — ICT Third-Party Register	OwnerDavid Okafor· Payments ReviewerTom Whitfield· Internal Audit ApproverBen Carter· Regulatory Change	In test	—	31 Aug 26
On track	EU-DORA-3P-REGISTER-C-010 DORA — control 10 EUDORA — ICT Third-Party Register	OwnerDavid Okafor· Payments ReviewerMarcus Lin· Risk ApproverChris Adeyemi· Executive	In test	—	3 Sep 26
At risk	EU-DORA-3P-REGISTER-C-004 DORA — control 4 EUDORA — ICT Third-Party Register	OwnerYuki Tanaka· Operations ReviewerTom Whitfield· Internal Audit ApproverRohan Patel· Change	In test	—	7 Sep 26
On track	EU-CSRD-2026-C-002 CSRD — control 2 EUCSRD — Sustainability Reporting	OwnerYuki Tanaka· Operations ReviewerTom Whitfield· Internal Audit ApproverRohan Patel· Change	In test	—	22 Sep 26
On track	EU-T1-SETTLE-2027-C-014 T+1 Settlement — control 14 EUT+1 Settlement — Final Rule	OwnerLena Kowalski· Wealth ReviewerMarcus Lin· Risk ApproverChris Adeyemi· Executive	In test	—	29 Sep 26

Showing up to 80 controls. Filter by jurisdiction, status or independence to narrow.