Skip to main content

Customer Reg Mapping Reporting and Gap Analysis

This section describes the types of insights and analysis that will be available to network members.

Regulation overview​

These insights will allow network members and the CUBE team to review the regulatory data in an easy-to-digest format, as well as understand the overall regulatory coverage within the platform.

  • All regulations in the platform, with the associated regulatory obligations that can be broken down by:

    • Regulator
    • Jurisdiction
    • Published date
    • Regulatory Theme
    • CUBE Control Index

  • For each regulation, a view of the regulatory elements that have been scoped and descoped according to Section 3.3.2. This provides the ability for customers to

    • Drill down to view rationale for descoping from predetermined list (i.e. preamble / definitions / supervisory responsibilities / permissions)
    • Drill down to see regulatory obligations for in-scope elements
    • For each regulation, a view of the regulatory obligations that have been matched to CUBE Index Controls, with the ability to view by
      • Regulatory obligation
      • Risk
      • Process
      • Regulatory Theme
      • CUBE Control Index

  • For each regulation, regulatory obligations mapped to the CUBE Index controls to show the status of all obligations -- whether matched or unmatched and if unmatched, the rationale.

Customer review of control matching​

These insights allow customers to review the mappings from regulatory obligations to their own controls via the CUBE Index controls. Customers will be able to review and accept or reject these matches based on CUBE's suggestions.

  • View of the regulation, the obligations and the associated matches to CUBE Index controls as well as the suggested unique to customer controls. This will also show:
    • Mappings of regulatory obligations to Level 3 risks
    • Mappings of regulatory obligations to Level 2 processes

Regulatory gap analysis reporting​

Customers will be able to view the coverage of their controls mapped to regulations and where they have control gaps relating to regulatory obligations. They will also be able to drill down into specific regulatory article / section control coverage and link directly to the related original regulatory text.

  • Regulatory gap analysis views will show
    • For each regulatory obligation, the number of customer controls that are
      • Matched
      • Unmatched
      • Control gaps
      • Not required
    • This data will be able to be viewed by
      • Regulator
      • Regulation
      • Regulatory Theme
      • Business line
      • Jurisdiction
      • Risks
      • Processes
      • CUBE Control Index

Network alignment​

Finally, as with customer controls, customers will be able to view their position in terms of regulatory coverage and control gaps in comparison with that of the network overall.

  • Overall view of network alignment of customer controls mapped to regulatory obligations showing
    • Matched controls mapped to regulatory obligations
    • Unique customer controls mapped to regulatory obligations
    • Comparison to the network broken down by
      • Regulation
      • Jurisdiction
      • Regulator
      • Regulatory Theme
      • Business lines
      • CUBE control Index

Risk Intelligence​

Existing Risk Intelligence analytics will be enhanced due to the improved granularity of regulatory data.