Audit & compliance

Regulatory compliance posture and control testing status. Sample data — pending backend wiring.

Open audit logs

Requirements tracked

5

Compliant

3

AML, KYC, PDPL

In progress

2

Cybersecurity, BCM

Open audit findings

4

0 overdue

Compliance matrix

RequirementScopeStatusLast assessmentNext review
AMLAML/CFT rules — monitoring, screening, GoAML reportingCompliantJun 2026Dec 2026
KYCCustomer due diligence, CR & UBO verificationCompliantJun 2026Dec 2026
CybersecuritySAMA Cyber Security Framework domainsIn progressJul 2026Oct 2026
PDPLPersonal Data Protection Law — consent, retention, transfersCompliantMay 2026Nov 2026
BCMBusiness continuity management & DR testingIn progressJul 2026Oct 2026

Regulatory controls

ControlDescriptionOwnerEvidenceLast testedStatus
CTL-01Daily safeguarding reconciliation (three-way match)Finance opsAutomated run logs + monthly attestation01 Aug 2026Compliant
CTL-02Transaction monitoring rules & threshold reviewMLROQuarterly rule-tuning report14 Jul 2026Compliant
CTL-03Privileged access reviewCISOQuarterly access recertification30 Jun 2026Compliant
CTL-04Penetration test remediation trackingCISOFindings register + retest reports22 Jul 2026In progress
CTL-05Data retention & deletion schedule (PDPL)DPORetention runbook + deletion logs15 May 2026Compliant
CTL-06Annual DR failover exerciseHead of engineeringDrill report with RTO/RPO actuals12 Jul 2026In progress