Design a well-formed, registration-ready control — and challenge it.
Guides you from a described process to a registration-ready control. The coach confirms the process, agrees the primary and secondary catalogue risks, checks for existing or overlapping controls, tests the mitigating activity against the control definition, then refines the full design — description, automation and baselining, control level, ICoFR assertions, roles and segregation of duties, and attributes — draws on comparable history, runs a quality check, and assembles the CCMT-aligned package. You make every decision and keep the sign-off.
- Confirm the process context and agree the primary and secondary risks
- Check the risk library for existing or overlapping controls before creating a new one
- Test the mitigating activity against the approved control definition
- Refine the design: description, automation, control level, ICoFR, roles and SoD, attributes
- Surface lessons from comparable past failures, issues and events
- Run a holistic quality check and assemble a registration-ready control package
Draws on: The OneORM risk & control library (ccmt), the approved control-design standard and comparable history.