Business processes
Search obligations, evidence, questions… ⌘K

Business processes

Thematic, cross-cutting business processes — each supported by multiple systems, governed by policies and controls, and mappable to regulatory requirements.

6
Processes
documented
22
Systems
supporting processes
18
Requirement links
mapped to processes
3
Managed+
at maturity
Processes6
BP-01Defined
ICT Incident Management

Detection, triage, response, recovery, and regulatory notification for ICT-related incidents across all jurisdictions.

4 systems 1 controls 4 requirementsIT Inès Tremblay
BP-02Managed
Third-Party & Supply Chain Management

Onboarding, ongoing assessment, concentration analysis, and exit planning for critical ICT and service providers.

3 systems 1 controls 3 requirementsMA Marcus Allen
BP-03Managed
Operational Resilience & Continuity

Identification of important business services, impact tolerances, scenario testing, and backup/recovery assurance.

4 systems 1 controls 3 requirementsSL Sophie Lindqvist
BP-04Defined
Identity & Access Management

Joiner-mover-leaver, privileged access governance, and periodic access recertification.

4 systems 1 controls 4 requirementsJW James Whitfield
BP-05Defined
Data Protection & Privacy Operations

Records of processing, DPIAs, data subject request handling, and breach notification.

3 systems 1 controls 3 requirementsIT Inès Tremblay
BP-06Managed
Customer Onboarding & Financial Crime

KYC, sanctions and PEP screening, enhanced due diligence, and ongoing monitoring.

4 systems 1 controls 1 requirementsTB Tom Brennan