Use control objective, risk, activity, evidence, and owner to describe a banking control.
The reframe: a good control makes the exception visible before it becomes a problem. Objective Start with the purpose. "Review accounts" is vague. "Prevent unauthorized changes to customer contact details" is a control objective. Risk and activity Name the failure mode, then match the activity to it. If the risk is fraud, a second review may help. If the risk is calculation error, automated validation may help. If the risk is a policy exception, evidence and approval thresholds matter. Evidence and monitoring Controls need proof. Logs, approvals, reconciliations, callback notes, and exception reports let supervisors and auditors see whether the…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in