Each blueprint is a curated, source-grounded target process. Map your own processes against it module by module and get a prioritised gap list — not a generic checklist.
Anti-money-laundering reference process: governance, CDD/KYC, beneficial ownership, enhanced due diligence, monitoring, reporting, retention and the cash limit — 12 modules, 41 grounded controls.
Open the AML blueprintDigital operational resilience: ICT risk management, the 4h/24h-72h-1-month incident reporting, resilience testing (TLPT) and third-party risk incl. the register of information — 13 modules, 24 grounded controls.
Open the DORA blueprintGerman supervisory risk management per BaFin circular 06/2024: ICAAP, control functions, outsourcing (AT 9), credit and trading business, IRRBB — with the BAIT sunset flagged — 13 modules, 31 grounded controls.
Open the MaRisk blueprintCybersecurity for essential and important entities incl. the German BSIG 2025: BSI registration, management duties, the 24h/72h/1-month reporting chain and the Art. 21 measures catalogue — 12 modules, 22 grounded controls.
Open the NIS2 blueprintTell us which regulation you're preparing for. We'll walk you through the AML blueprint live and scope the Map & Gap for your own processes.