The approval route
The library records purpose, owner, frequency, evidence and review expectations. Controls addressing the same risk are mapped together, allowing duplication to be identified and, where appropriate, referred for further duplication analysis. The catalogue is searchable by identifier and occasionally by purpose.
- 01Risk
- 02Control activity
- 03Evidence
- 04Independent review
A request in motion
A reconciliation is checked by two teams using the same source. The review asks whether the second check adds independent evidence or merely a second signature. The answer determines whether the control changes or receives a more confident description.
