Controls
Mapped to what
they satisfy.
A control register for regulated firms, mapped to the obligations and risks each control satisfies: design and operating ratings, gap analysis, and the residual risk they earn, without the workshop.
Controls, in the platform
Dashboard Controls Processes Compliance Framework Score
| Title | Risk(s) | Description | Owner(s) | Frequency | Rating | Status | Actions |
|---|---|---|---|---|---|---|---|
| AML/CFT/CPF Policy & Procedures Manual | Suitability (L1)Risk Assessment (L2) | Board-approved AML/CFT/CPF policy and procedures manual, maintained… | Annually | Established | Draft | 2 | |
| Anti-Bribery & Corruption Arrangements | – | Board-approved policy prohibiting bribery and corruption in any form,… | – | Established | Active | 2 | |
| Auditor Appointment & Engagement | Financial Resources (L1)Resilience (L1) | Control governing the appointment of the auditor and engagement letter… | – | Established | Active | 1 | |
| Best Execution & Order Handling Procedure | Financial Crime Monitoring (L1) | Procedure ensuring client orders are executed promptly, fairly and in due turn… | – | Established | Active | 2 | |
| Business Continuity Plan | Client Assets (L1) | Documented and tested business continuity and operational resilience… | – | Established | Active | 2 | |
| Capital & Liquidity Monitoring Control | Financial Crime Governance (L1) | Ongoing monitoring of minimum capital, net asset and (where applicable)… | – | Established | Active | 1 | |
| CDD Exemptions & Simplified Measures Control | Customer Due Diligence (L1) | Control governing the application of CDD exemptions and concessions… | Annually | Established | Active | 2 | |
| Client Asset Reconciliation | Client Assets (L1) | Daily reconciliation of client money and custody assets against external… | Daily | Established | Active | 0 | |
| Complaints Handling Procedure | Resilience (L1) | Documented procedure for logging, acknowledging, investigating and… | – | Developing | Active | 1 | |
| Conflicts of Interest Register Review | Suitability (L1) | Periodic review of the conflicts register and the effectiveness of… | Quarterly | Established | Active | 0 | |
| Data Protection Impact Assessment | Resilience (L1) | DPIA carried out before any new processing likely to result in high… | – | Developing | Draft | 1 |
Items per page 25 1 of 3 Showing 1 to 25 of 66
What it does
Controls, in the function you actually run.
One control register, mapped to the obligations and risks each control addresses. Gap analysis is a report, not a project.
- Design and operating-effectiveness ratings, with the lower of the two driving residual risk.
- Obligations without controls, controls without recent tests, risks without owners: all answered from the same data.
Also in Vantage Point
The rest of the system.
- Risks Inherent. Residual. Entity-scoped.
- Actions Corrective. Monitoring. Escalation. One workflow.
- CMP Doing it right.
- Registers Pre-built registers. Configurable fields.
- Regulatory library Pre-built. Kept current.
- Reports Live data. Committee-ready.
- Entities One system. Yours and your clients'.
- Audit trail Audit by design.
Questions
Questions about controls.
- What is a control in Vantage Point?
- A documented control with a CTRL reference, an owner, a review frequency, a design rating and an operating-effectiveness rating (Weak, Developing, Established, Strong), mapped to the obligations it satisfies and the risks it mitigates.
- How does control mapping work?
- Each control is linked to the obligations it satisfies and the risks it treats. Because the links are data rather than a workshop output, the gap questions answer themselves: obligations with no control, controls with no recent test, controls whose owner has left.
- Which rating drives residual risk?
- The lower of design and operating effectiveness. A control that is well designed but not operating earns the deduction of the weaker rating, which is what an auditor would conclude and what the residual figure should show.
- How do controls connect to monitoring?
- Tests in the compliance monitoring programme are linked to controls, and controls to obligations, so the plan addresses what matters and a failed test raises a corrective action against the control that failed.
- Is there a starter set of controls?
- Yes. Selecting the licence type populates a starter set of controls mapped to the pre-built obligations and risk taxonomy. You tighten, rename or retire them during onboarding; nothing forces you to keep a control that does not describe how you actually operate.
Related
Controls, further in.
Next step30 min · Tailored · No deck
See controls running on your firm's structure.
A 30-minute walkthrough using your entities, your licences and a real workflow you bring to the call. No slide deck.