M3 — Confirm

Controls, evidence, independence — regulator-defensible by default.

Every control has a named owner, an independent reviewer and an approver. Same-team overlaps are flagged automatically; blocking conflicts stop sign-off.

Controls in flight

Ready for evidence

Evidenced

Independence issues

JurisdictionAll UK EU US CA SG HK AU UAE GLOBAL

StatusAll Proposed In design In test Ready Evidenced Approved

Independence issues only

RAG	Control	Owner · Reviewer · Approver	Status	Evidence	Due
Not started	US-CFPB-1071-2026-C-010 Small Business Data Collection — control 10 USSmall Business Data Collection — Section 1071	OwnerLena Kowalski· Wealth ReviewerMarcus Lin· Risk ApproverChris Adeyemi· Executive	Evidenced	2	25 Aug 26
On track	US-OCC-3P-RISK-2026-C-002 OCC Third-Party Risk Management Guidance — control 2 USOCC Third-Party Risk Management Guidance	OwnerYuki Tanaka· Operations ReviewerNina Bergqvist· Retail Banking ApproverChris Adeyemi· Executive	Evidenced	3	3 Sep 26
On track	US-OCC-3P-RISK-2026-C-005 OCC Third-Party Risk Management Guidance — control 5 USOCC Third-Party Risk Management Guidance	OwnerLena Kowalski· Wealth ReviewerArjun Menon· Payments ApproverRohan Patel· Change	Evidenced	1	29 Sep 26

Showing up to 80 controls. Filter by jurisdiction, status or independence to narrow.