Guardexia › Gap analysis

Free · 2 minutes · live regime

PS25/12 exposure check

Find the control gaps most likely to create difficulty during a CASS 15 audit or supervisory review. Get an instant result and a practical evidence checklist. This is a high-level indicator only, not legal or regulatory advice.

How scoring works
Bands are based on your total “Yes” count: 0–5 = High Risk, 6–8 = Partial Compliance, 9–12 = Compliant-Ready. Questions 1, 2, 9, and 12 are regulatory-critical. A “No” to any of those caps the result at Partial Compliance.

Checklist (12 questions)

For each item, Yes means you have a documented, repeatable control in place that you could evidence in a supervisory visit. Critical items (1, 2, 9, 12) are marked.

Question 1 of 128%

1. Daily internal and external safeguarding reconciliations are run on each business day, with exception handling.

2. Monthly regulatory MI (including safeguarding metrics needed for FCA returns) is produced from a single system of record, not ad-hoc spreadsheets only.

3. A CASS 10A / resolution pack exists and you have run a timed exercise to produce it (or the critical extracts) within the required window.

4. The wind-down plan is board-approved, reviewed on a set cadence, and connected to your safeguarding and capital monitoring.

5. SMF attestation and governance for safeguarding controls are in place, with a clear line between operational evidence and attestation sign-off.

6. You can generate audit-ready export packs (reconciliation, breach, resolution pack data) on demand for a given date or period.

7. A safeguarding-specific independent audit is planned (or under way) with a qualified firm, aligned to the CASS 15 / PS25/12 expectations.

8. Material safeguarding postings and sign-offs use maker–checker (or equivalent four-eyes) controls.

9. Breach and variance events are registered, tracked to closure, and retrievable in an immutable audit trail.

10. Prudential (capital) monitoring is not siloed: it references the same date / scope as your safeguarding data where required.

11. You have defined variance / breach thresholds and a process to alert responsible owners within your internal SLA (same day or as per policy).

12. For each reconciliation date, you can show lineage from source systems (bank, ledger, client position) to the signed position.

Choose Yes or No to continue