M3 — Confirm

Controls, evidence, independence — regulator-defensible by default.

Every control has a named owner, an independent reviewer and an approver. Same-team overlaps are flagged automatically; blocking conflicts stop sign-off.

Controls in flight

Ready for evidence

Evidenced

Independence issues

JurisdictionAll UK EU US CA SG HK AU UAE GLOBAL

StatusAll Proposed In design In test Ready Evidenced Approved

Independence issues only

RAG	Control	Owner · Reviewer · Approver	Status	Evidence	Due
On track	CA-OSFI-B10-2026-C-002 OSFI B-10 — control 2 CAOSFI B-10 — Third-Party Arrangements	OwnerYuki Tanaka· Operations ReviewerMarcus Lin· Risk ApproverBen Carter· Regulatory Change	Approved	3	6 Jul 26
On track	EU-MICA-2026-C-009Check MiCA — control 9 EUMiCA — Whitepaper Filing Regime	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverAlex Novak· Retail Banking	Approved	1	8 Jul 26
On track	PRA-OP-RES-2026-C-007 Operational Resilience — control 7 UKOperational Resilience — Impact Tolerances Refresh	OwnerAmelia Hart· Retail Banking ReviewerArjun Menon· Payments ApproverBen Carter· Regulatory Change	Approved	2	12 Jul 26
Off track	PRA-OP-RES-2026-C-001 Operational Resilience — control 1 UKOperational Resilience — Impact Tolerances Refresh	OwnerYuki Tanaka· Operations ReviewerMarcus Lin· Risk ApproverBen Carter· Regulatory Change	Approved	3	6 Aug 26
At risk	EU-AI-ACT-FIN-2026-C-003 EU AI Act — control 3 EUEU AI Act — Financial Services Guidance	OwnerLena Kowalski· Wealth ReviewerNina Bergqvist· Retail Banking ApproverRohan Patel· Change	Approved	3	6 Aug 26
Not started	CA-OSFI-B10-2026-C-003 OSFI B-10 — control 3 CAOSFI B-10 — Third-Party Arrangements	OwnerAmelia Hart· Retail Banking ReviewerTom Whitfield· Internal Audit ApproverRohan Patel· Change	Approved	—	12 Aug 26
On track	MAS-EDDR-2026-C-001Check MAS Enhanced Due Diligence Rules — control 1 SGMAS Enhanced Due Diligence Rules — VA	OwnerDavid Okafor· Payments ReviewerArjun Menon· Payments ApproverAlex Novak· Retail Banking	Approved	—	14 Aug 26
At risk	UAE-DFSA-CRYPTO-2026-C-005Check DFSA Crypto Token Regime — control 5 UAEDFSA Crypto Token Regime — Phase 2	OwnerDavid Okafor· Payments ReviewerArjun Menon· Payments ApproverChris Adeyemi· Executive	Approved	—	15 Aug 26
At risk	US-OCC-3P-RISK-2026-C-003 OCC Third-Party Risk Management Guidance — control 3 USOCC Third-Party Risk Management Guidance	OwnerPriya Desai· Global Markets ReviewerTom Whitfield· Internal Audit ApproverChris Adeyemi· Executive	Approved	3	4 Sep 26
At risk	EU-T1-SETTLE-2027-C-001Check T+1 Settlement — control 1 EUT+1 Settlement — Final Rule	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverBen Carter· Regulatory Change	Approved	3	6 Sep 26
On track	CA-OSFI-B10-2026-C-006 OSFI B-10 — control 6 CAOSFI B-10 — Third-Party Arrangements	OwnerYuki Tanaka· Operations ReviewerTom Whitfield· Internal Audit ApproverRohan Patel· Change	Approved	—	22 Sep 26

Showing up to 80 controls. Filter by jurisdiction, status or independence to narrow.