M3 — Confirm

Controls, evidence, independence — regulator-defensible by default.

Every control has a named owner, an independent reviewer and an approver. Same-team overlaps are flagged automatically; blocking conflicts stop sign-off.

Controls in flight

Ready for evidence

Evidenced

Independence issues

JurisdictionAll UK EU US CA SG HK AU UAE GLOBAL

StatusAll Proposed In design In test Ready Evidenced Approved

Independence issues only

RAG	Control	Owner · Reviewer · Approver	Status	Evidence	Due
At risk	US-SEC-CYBER-2026-C-002 SEC Cyber Incident Disclosure Rule — control 2 USSEC Cyber Incident Disclosure Rule	OwnerLena Kowalski· Wealth ReviewerArjun Menon· Payments ApproverBen Carter· Regulatory Change	Proposed	—	6 Jul 26
On track	MAS-EDDR-2026-C-002 MAS Enhanced Due Diligence Rules — control 2 SGMAS Enhanced Due Diligence Rules — VA	OwnerPriya Desai· Global Markets ReviewerArjun Menon· Payments ApproverAlex Novak· Retail Banking	Proposed	—	17 Jul 26
At risk	HK-HKMA-TECH-2026-C-006 HKMA Cyber Resilience Assessment Framework — control 6 HKHKMA Cyber Resilience Assessment Framework	OwnerPriya Desai· Global Markets ReviewerInes Silva· Legal ApproverBen Carter· Regulatory Change	Proposed	—	18 Jul 26
Off track	EU-MICA-2026-C-013 MiCA — control 13 EUMiCA — Whitepaper Filing Regime	OwnerLena Kowalski· Wealth ReviewerArjun Menon· Payments ApproverBen Carter· Regulatory Change	Proposed	—	5 Aug 26
At risk	MAS-OR-TRM-2026-C-001 MAS Technology Risk Management Guidelines Update — control 1 SGMAS Technology Risk Management Guidelines Update	OwnerAmelia Hart· Retail Banking ReviewerTom Whitfield· Internal Audit ApproverBen Carter· Regulatory Change	Proposed	—	29 Aug 26
Not started	FCA-CONSUMER-DUTY-2026-C-004 Consumer Duty — control 4 UKConsumer Duty — Annual Board Report	OwnerLena Kowalski· Wealth ReviewerTom Whitfield· Internal Audit ApproverChris Adeyemi· Executive	Proposed	—	1 Sep 26
On track	EU-T1-SETTLE-2027-C-012 T+1 Settlement — control 12 EUT+1 Settlement — Final Rule	OwnerYuki Tanaka· Operations ReviewerTom Whitfield· Internal Audit ApproverRohan Patel· Change	Proposed	—	8 Sep 26
At risk	FCA-CONSUMER-DUTY-2026-C-002 Consumer Duty — control 2 UKConsumer Duty — Annual Board Report	OwnerDavid Okafor· Payments ReviewerNina Bergqvist· Retail Banking ApproverBen Carter· Regulatory Change	Proposed	—	19 Sep 26
At risk	HK-HKMA-TECH-2026-C-007 HKMA Cyber Resilience Assessment Framework — control 7 HKHKMA Cyber Resilience Assessment Framework	OwnerLena Kowalski· Wealth ReviewerNina Bergqvist· Retail Banking ApproverBen Carter· Regulatory Change	Proposed	—	20 Sep 26
At risk	EU-MICA-2026-C-010 MiCA — control 10 EUMiCA — Whitepaper Filing Regime	OwnerDavid Okafor· Payments ReviewerMarcus Lin· Risk ApproverRohan Patel· Change	Proposed	—	23 Sep 26
Not started	HK-HKMA-TECH-2026-C-004Check HKMA Cyber Resilience Assessment Framework — control 4 HKHKMA Cyber Resilience Assessment Framework	OwnerAmelia Hart· Retail Banking ReviewerNina Bergqvist· Retail Banking ApproverChris Adeyemi· Executive	Proposed	—	23 Sep 26

Showing up to 80 controls. Filter by jurisdiction, status or independence to narrow.