Each control maps a regulatory requirement to a deterministic, testable check against your payment operations data.
Tests every transaction where |processor_amount − actual_settlement| exceeds tolerance and raises a HIGH exception requiring evidence.
Verifies that active critical vendors have current due-diligence, contracts and monitoring evidence on file.
BSP · IT Risk Management / Outsourcing
Checks that required IT risk controls (access review, change logs, backups) have evidence within the review window.
BSP · IT Risk Management
Verifies AML program artifacts and reporting completeness. Not an AML transaction-monitoring replacement.
AMLC · AML/CTF Program
Checks disclosure, complaint-handling and dispute-resolution evidence for the period.
BSP · End-User Protection