On trackPRA-OP-RES-2026-C-004
Operational Resilience — control 4
UK Operational Resilience — Impact Tolerances Refresh
Owner Amelia Hart · Retail Banking
Reviewer Arjun Menon · Payments
Approver Rohan Patel · Change
In design — 6 Jul 26 Open At riskEU-DORA-3P-REGISTER-C-019
DORA — control 19
EU DORA — ICT Third-Party Register
Owner David Okafor · Payments
Reviewer Marcus Lin · Risk
Approver Alex Novak · Retail Banking
In design — 7 Jul 26 Open At riskCA-OSFI-B10-2026-C-004
OSFI B-10 — control 4
CA OSFI B-10 — Third-Party Arrangements
Owner Yuki Tanaka · Operations
Reviewer Tom Whitfield · Internal Audit
Approver Rohan Patel · Change
In design — 7 Jul 26 Open At riskFCA-CONSUMER-DUTY-2026-C-011
Consumer Duty — control 11
UK Consumer Duty — Annual Board Report
Owner Yuki Tanaka · Operations
Reviewer Ines Silva · Legal
Approver Chris Adeyemi · Executive
In design — 9 Jul 26 Open At riskEU-T1-SETTLE-2027-C-007
T+1 Settlement — control 7
EU T+1 Settlement — Final Rule
Owner David Okafor · Payments
Reviewer Tom Whitfield · Internal Audit
Approver Ben Carter · Regulatory Change
In design — 12 Jul 26 Open At riskMAS-OR-TRM-2026-C-002
MAS Technology Risk Management Guidelines Update — control 2
SG MAS Technology Risk Management Guidelines Update
Owner Priya Desai · Global Markets
Reviewer Tom Whitfield · Internal Audit
Approver Chris Adeyemi · Executive
In design — 13 Jul 26 Open On trackMAS-EDDR-2026-C-004
MAS Enhanced Due Diligence Rules — control 4
SG MAS Enhanced Due Diligence Rules — VA
Owner Priya Desai · Global Markets
Reviewer Tom Whitfield · Internal Audit
Approver Alex Novak · Retail Banking
In design — 14 Jul 26 Open Off trackUS-SEC-CYBER-2026-C-001
SEC Cyber Incident Disclosure Rule — control 1
US SEC Cyber Incident Disclosure Rule
Owner Priya Desai · Global Markets
Reviewer Nina Bergqvist · Retail Banking
Approver Ben Carter · Regulatory Change
In design — 21 Jul 26 Open At riskEU-DORA-3P-REGISTER-C-006
DORA — control 6
EU DORA — ICT Third-Party Register
Owner Priya Desai · Global Markets
Reviewer Ines Silva · Legal
Approver Ben Carter · Regulatory Change
In design — 24 Jul 26 Open At riskMAS-OR-TRM-2026-C-004
MAS Technology Risk Management Guidelines Update — control 4
SG MAS Technology Risk Management Guidelines Update
Owner Priya Desai · Global Markets
Reviewer Arjun Menon · Payments
Approver Alex Novak · Retail Banking
In design — 26 Jul 26 Open At riskHK-SFC-VA-2026-C-005
SFC Virtual Asset Licensing Regime — control 5
HK SFC Virtual Asset Licensing Regime
Owner Yuki Tanaka · Operations
Reviewer Arjun Menon · Payments
Approver Rohan Patel · Change
In design — 26 Jul 26 Open On trackPRA-OP-RES-2026-C-002
Operational Resilience — control 2
UK Operational Resilience — Impact Tolerances Refresh
Owner Priya Desai · Global Markets
Reviewer Ines Silva · Legal
Approver Alex Novak · Retail Banking
In design — 31 Jul 26 Open On trackMAS-OR-TRM-2026-C-007
MAS Technology Risk Management Guidelines Update — control 7
SG MAS Technology Risk Management Guidelines Update
Owner Yuki Tanaka · Operations
Reviewer Ines Silva · Legal
Approver Alex Novak · Retail Banking
In design — 2 Aug 26 Open Not startedEU-T1-SETTLE-2027-C-008
T+1 Settlement — control 8
EU T+1 Settlement — Final Rule
Owner Lena Kowalski · Wealth
Reviewer Marcus Lin · Risk
Approver Alex Novak · Retail Banking
In design — 4 Aug 26 Open Off trackEU-MICA-2026-C-002
MiCA — control 2
EU MiCA — Whitepaper Filing Regime
Owner Amelia Hart · Retail Banking
Reviewer Ines Silva · Legal
Approver Ben Carter · Regulatory Change
In design — 6 Aug 26 Open At riskEU-DORA-3P-REGISTER-C-017
DORA — control 17
EU DORA — ICT Third-Party Register
Owner Yuki Tanaka · Operations
Reviewer Nina Bergqvist · Retail Banking
Approver Rohan Patel · Change
In design — 7 Aug 26 Open At riskUS-SEC-CYBER-2026-C-004 CheckSEC Cyber Incident Disclosure Rule — control 4
US SEC Cyber Incident Disclosure Rule
Owner Lena Kowalski · Wealth
Reviewer Nina Bergqvist · Retail Banking
Approver Alex Novak · Retail Banking
In design — 8 Aug 26 Open At riskEU-T1-SETTLE-2027-C-002
T+1 Settlement — control 2
EU T+1 Settlement — Final Rule
Owner Priya Desai · Global Markets
Reviewer Marcus Lin · Risk
Approver Alex Novak · Retail Banking
In design — 9 Aug 26 Open Off trackUAE-DFSA-CRYPTO-2026-C-003
DFSA Crypto Token Regime — control 3
UAE DFSA Crypto Token Regime — Phase 2
Owner Amelia Hart · Retail Banking
Reviewer Tom Whitfield · Internal Audit
Approver Alex Novak · Retail Banking
In design — 9 Aug 26 Open Off trackFCA-CONSUMER-DUTY-2026-C-003
Consumer Duty — control 3
UK Consumer Duty — Annual Board Report
Owner David Okafor · Payments
Reviewer Marcus Lin · Risk
Approver Chris Adeyemi · Executive
In design — 10 Aug 26 Open On trackEU-T1-SETTLE-2027-C-013
T+1 Settlement — control 13
EU T+1 Settlement — Final Rule
Owner David Okafor · Payments
Reviewer Ines Silva · Legal
Approver Chris Adeyemi · Executive
In design — 10 Aug 26 Open Off trackEU-DORA-3P-REGISTER-C-011
DORA — control 11
EU DORA — ICT Third-Party Register
Owner Priya Desai · Global Markets
Reviewer Marcus Lin · Risk
Approver Alex Novak · Retail Banking
In design — 11 Aug 26 Open At riskEU-T1-SETTLE-2027-C-004
T+1 Settlement — control 4
EU T+1 Settlement — Final Rule
Owner Yuki Tanaka · Operations
Reviewer Nina Bergqvist · Retail Banking
Approver Rohan Patel · Change
In design — 11 Aug 26 Open Off trackUS-SEC-CYBER-2026-C-007
SEC Cyber Incident Disclosure Rule — control 7
US SEC Cyber Incident Disclosure Rule
Owner Yuki Tanaka · Operations
Reviewer Ines Silva · Legal
Approver Ben Carter · Regulatory Change
In design — 13 Aug 26 Open On trackGLOBAL-BCBS-CVA-2026-C-003
BCBS CVA Framework — control 3
GLOBAL BCBS CVA Framework — Basel Finalisation
Owner Yuki Tanaka · Operations
Reviewer Ines Silva · Legal
Approver Rohan Patel · Change
In design — 13 Aug 26 Open Off trackFCA-CONSUMER-DUTY-2026-C-001 CheckConsumer Duty — control 1
UK Consumer Duty — Annual Board Report
Owner Amelia Hart · Retail Banking
Reviewer Nina Bergqvist · Retail Banking
Approver Alex Novak · Retail Banking
In design — 18 Aug 26 Open Off trackEU-DORA-3P-REGISTER-C-021 CheckDORA — control 21
EU DORA — ICT Third-Party Register
Owner Amelia Hart · Retail Banking
Reviewer Nina Bergqvist · Retail Banking
Approver Chris Adeyemi · Executive
In design — 18 Aug 26 Open Off trackAU-APRA-CPS-230-2026-C-008
APRA CPS 230 — control 8
AU APRA CPS 230 — Operational Risk Management
Owner Yuki Tanaka · Operations
Reviewer Tom Whitfield · Internal Audit
Approver Rohan Patel · Change
In design — 19 Aug 26 Open At riskMiCA — control 4
EU MiCA — Whitepaper Filing Regime
Owner David Okafor · Payments
Reviewer Arjun Menon · Payments
Approver Alex Novak · Retail Banking
In design — 20 Aug 26 Open At riskEU-DORA-3P-REGISTER-C-008 CheckDORA — control 8
EU DORA — ICT Third-Party Register
Owner Lena Kowalski · Wealth
Reviewer Nina Bergqvist · Retail Banking
Approver Alex Novak · Retail Banking
In design — 22 Aug 26 Open At riskUS-CFPB-1071-2026-C-002
Small Business Data Collection — control 2
US Small Business Data Collection — Section 1071
Owner David Okafor · Payments
Reviewer Ines Silva · Legal
Approver Alex Novak · Retail Banking
In design — 22 Aug 26 Open At riskEU-MICA-2026-C-008
MiCA — control 8
EU MiCA — Whitepaper Filing Regime
Owner Priya Desai · Global Markets
Reviewer Ines Silva · Legal
Approver Alex Novak · Retail Banking
In design — 23 Aug 26 Open At riskEU-T1-SETTLE-2027-C-011
T+1 Settlement — control 11
EU T+1 Settlement — Final Rule
Owner Amelia Hart · Retail Banking
Reviewer Tom Whitfield · Internal Audit
Approver Rohan Patel · Change
In design — 25 Aug 26 Open Off trackEU-MICA-2026-C-014
MiCA — control 14
EU MiCA — Whitepaper Filing Regime
Owner David Okafor · Payments
Reviewer Nina Bergqvist · Retail Banking
Approver Ben Carter · Regulatory Change
In design — 27 Aug 26 Open Off trackMAS-OR-TRM-2026-C-005 CheckMAS Technology Risk Management Guidelines Update — control 5
SG MAS Technology Risk Management Guidelines Update
Owner Priya Desai · Global Markets
Reviewer Nina Bergqvist · Retail Banking
Approver Alex Novak · Retail Banking
In design — 27 Aug 26 Open At riskEU-DORA-3P-REGISTER-C-012
DORA — control 12
EU DORA — ICT Third-Party Register
Owner Yuki Tanaka · Operations
Reviewer Tom Whitfield · Internal Audit
Approver Chris Adeyemi · Executive
In design — 28 Aug 26 Open On trackPRA-OP-RES-2026-C-009
Operational Resilience — control 9
UK Operational Resilience — Impact Tolerances Refresh
Owner Lena Kowalski · Wealth
Reviewer Tom Whitfield · Internal Audit
Approver Chris Adeyemi · Executive
In design — 29 Aug 26 Open At riskFCA-CONSUMER-DUTY-2026-C-009
Consumer Duty — control 9
UK Consumer Duty — Annual Board Report
Owner Amelia Hart · Retail Banking
Reviewer Tom Whitfield · Internal Audit
Approver Rohan Patel · Change
In design — 30 Aug 26 Open At riskEU-DORA-3P-REGISTER-C-020
DORA — control 20
EU DORA — ICT Third-Party Register
Owner Amelia Hart · Retail Banking
Reviewer Ines Silva · Legal
Approver Rohan Patel · Change
In design — 30 Aug 26 Open On trackFCA-CONSUMER-DUTY-2026-C-005
Consumer Duty — control 5
UK Consumer Duty — Annual Board Report
Owner David Okafor · Payments
Reviewer Nina Bergqvist · Retail Banking
Approver Rohan Patel · Change
In design — 1 Sep 26 Open Not startedMiCA — control 7
EU MiCA — Whitepaper Filing Regime
Owner Amelia Hart · Retail Banking
Reviewer Nina Bergqvist · Retail Banking
Approver Ben Carter · Regulatory Change
In design — 1 Sep 26 Open At riskEU-AI-ACT-FIN-2026-C-002
EU AI Act — control 2
EU EU AI Act — Financial Services Guidance
Owner David Okafor · Payments
Reviewer Marcus Lin · Risk
Approver Alex Novak · Retail Banking
In design — 1 Sep 26 Open On trackUS-CFPB-1071-2026-C-008
Small Business Data Collection — control 8
US Small Business Data Collection — Section 1071
Owner Amelia Hart · Retail Banking
Reviewer Ines Silva · Legal
Approver Ben Carter · Regulatory Change
In design — 3 Sep 26 Open At riskEU-T1-SETTLE-2027-C-003
T+1 Settlement — control 3
EU T+1 Settlement — Final Rule
Owner Yuki Tanaka · Operations
Reviewer Ines Silva · Legal
Approver Chris Adeyemi · Executive
In design — 4 Sep 26 Open At riskUS-CFPB-1071-2026-C-009
Small Business Data Collection — control 9
US Small Business Data Collection — Section 1071
Owner Yuki Tanaka · Operations
Reviewer Arjun Menon · Payments
Approver Chris Adeyemi · Executive
In design — 5 Sep 26 Open On trackHMT-CRYPTO-2026-C-003
HMT Cryptoasset Regime — control 3
UK HMT Cryptoasset Regime — Perimeter
Owner Lena Kowalski · Wealth
Reviewer Arjun Menon · Payments
Approver Alex Novak · Retail Banking
In design — 7 Sep 26 Open At riskMiCA — control 1
EU MiCA — Whitepaper Filing Regime
Owner Amelia Hart · Retail Banking
Reviewer Nina Bergqvist · Retail Banking
Approver Chris Adeyemi · Executive
In design — 9 Sep 26 Open Not startedHK-SFC-VA-2026-C-004
SFC Virtual Asset Licensing Regime — control 4
HK SFC Virtual Asset Licensing Regime
Owner Priya Desai · Global Markets
Reviewer Arjun Menon · Payments
Approver Chris Adeyemi · Executive
In design — 9 Sep 26 Open At riskAU-APRA-CPS-230-2026-C-010
APRA CPS 230 — control 10
AU APRA CPS 230 — Operational Risk Management
Owner Priya Desai · Global Markets
Reviewer Arjun Menon · Payments
Approver Chris Adeyemi · Executive
In design — 10 Sep 26 Open Off trackEU-MICA-2026-C-005
MiCA — control 5
EU MiCA — Whitepaper Filing Regime
Owner Priya Desai · Global Markets
Reviewer Tom Whitfield · Internal Audit
Approver Rohan Patel · Change
In design — 11 Sep 26 Open Off trackEU-MICA-2026-C-011
MiCA — control 11
EU MiCA — Whitepaper Filing Regime
Owner Amelia Hart · Retail Banking
Reviewer Tom Whitfield · Internal Audit
Approver Chris Adeyemi · Executive
In design — 11 Sep 26 Open Off trackAU-APRA-CPS-230-2026-C-006
APRA CPS 230 — control 6
AU APRA CPS 230 — Operational Risk Management
Owner Lena Kowalski · Wealth
Reviewer Tom Whitfield · Internal Audit
Approver Rohan Patel · Change
In design — 12 Sep 26 Open At riskUS-CFPB-1071-2026-C-003
Small Business Data Collection — control 3
US Small Business Data Collection — Section 1071
Owner Lena Kowalski · Wealth
Reviewer Arjun Menon · Payments
Approver Rohan Patel · Change
In design — 16 Sep 26 Open At riskHMT-CRYPTO-2026-C-004
HMT Cryptoasset Regime — control 4
UK HMT Cryptoasset Regime — Perimeter
Owner Amelia Hart · Retail Banking
Reviewer Arjun Menon · Payments
Approver Ben Carter · Regulatory Change
In design — 21 Sep 26 Open At riskAU-APRA-CPS-230-2026-C-001 CheckAPRA CPS 230 — control 1
AU APRA CPS 230 — Operational Risk Management
Owner Amelia Hart · Retail Banking
Reviewer Nina Bergqvist · Retail Banking
Approver Rohan Patel · Change
In design — 25 Sep 26 Open On trackGLOBAL-BCBS-CVA-2026-C-005
BCBS CVA Framework — control 5
GLOBAL BCBS CVA Framework — Basel Finalisation
Owner Priya Desai · Global Markets
Reviewer Nina Bergqvist · Retail Banking
Approver Ben Carter · Regulatory Change
In design — 30 Sep 26 Open Not startedUS-CFPB-1071-2026-C-007
Small Business Data Collection — control 7
US Small Business Data Collection — Section 1071
Owner Priya Desai · Global Markets
Reviewer Ines Silva · Legal
Approver Rohan Patel · Change
In design — 1 Oct 26 Open