Reference regulatory obligations and business processes
Relationship between reference regulatory obligations and business processes
All regulatory obligations will relate to specific business processes and activities. As per section 3.4.3, these business processes will be identified when reference regulatory obligations are extracted from the regulatory text.
Mapping of reference regulatory obligations to the CUBE Process Taxonomy
Based on the identification of these business processes, reference regulatory obligations will be mapped to the CUBE Process Taxonomy at the most granular level - Level 3.
CUBE Index controls are already mapped to the Process Taxonomy and therefore this facilitates the accuracy of the matching of reference regulatory obligations to CUBE controls and makes use of the existing relationships in the data model.