01
Policy → Control
policy · regulation · bank questionnaire lands
extract & classify obligations
map → control · process · owner · evidence
interpreted right? missing · weak · ambiguous?
prioritise gaps by risk & effort
control matrix · gap memo · action list
what must we do, what’s missing, who owns the fix?