GRC / regulatory analyst
Regulatory analyst
IBM OpenPages / GRC · harm × applicability × deadline pressure × evidence gap
8 open · capacity 403 P12 holds ahead of score1 Need more96m to work · 480m in the shift
OCC MRIA — model risk documentation
Exam team asked for challenger-model evidence on the deposit-pricing model. Packet is partial.
Open packetPriLaneCaseWhyCitationOwnerSevStatus
P2HoldBSA exam in 40 days — SAR evidence thinFinCEN / BSA examQ2 SAR narrative sample failed internal QA on 'complete story' 4 of 12 times.31 CFR 1020.320AMLhighOpenP1Critical citationApproved policy language drifted in productionAA-AUTO-001 vs CFPB clauseProduction template dropped the AI disclosure sentence during a 'plain language' edit.CFPB 2026-04Compliance opscriticalOpenP1Critical citationCFPB circular — AI adverse-action noticesCFPB 2026-04 §4.2(b)Auto-decision templates in lending do not currently name model version or top factors. Circular is in force.CFPB 2026-04 §4.2(b)UnassignedcriticalOpenP2StandardControl owner left — obligation orphanedUDAAP marketing reviewOwner terminated 19 days ago. OpenPages still lists them. Next test is in 12 days.UDAAP programVacantmoderateOpenP2StandardNYDFS 500 amendment — MFA on vendors23 NYCRR 500Amendment expands MFA to a class of vendors we treat as low-risk. Inventory is 70% mapped.23 NYCRR 500InfoSechighOpenP3StandardState UDAAP class language on collections lettersMA 93A / collectionsPlaintiff firm letter cites our 2024 collections template. Letter is not a rule, but the template is still live.MA 93A (alleged)LitigationmoderateOpenP3Need moreDORA overlap for EU branchEU DORA · ICT riskAsk: Harm is high or the packet is incomplete. Do not auto-clear.EU branch is in scope. US parent controls are mapped to NYDFS, not DORA incident clocks.DORA Art. 19Legal EUmoderateNeed morePolicy lanes sit above score. A hold cannot fall behind ACH noise. Park with owner stays in the queue.