Description

A focused course, tailored for you

Multi-Framework Compliance Mapping for Bank Regulatory Specialists

Build the single regulatory mapping document that holds up when your examiner asks about all six frameworks at once.

You maintain the compliance programme, but the frameworks keep multiplying. EBA ICT risk guidelines, DORA operational resilience requirements, MiFID conduct obligations, ESG disclosure crossovers, BCBS 239 data lineage expectations, and your domestic regulator's own overlay on top. Each framework arrived with its own tracker. Now you have six trackers that partially contradict each other, none of which is the document your examiner actually pulls when they walk in.

$199 one-time

Tailored to your situation. Access within 24 hours. 30-day money-back.

Includes a hand-built implementation playbook delivered alongside course access, generated for your specific situation.

Why this course

The compliance mapping problem at global banks is not a knowledge gap. You know what each framework requires. The problem is structural: most compliance specialists build one tracker per regulation, one policy per framework, one gap log per audit cycle. That works when you have one regulator and two frameworks. It breaks when you have three regulators, six active frameworks, and a monthly rhythm of regulatory change notices from EBA, ESMA, ACPR, and your group compliance function simultaneously. The document that takes the longest to prepare before every review is the one that consolidates all of it. And it takes the longest because nobody built it to be maintained. They built it to survive the last audit.

What you walk away with

Design a single consolidated regulatory mapping structure that covers EBA ICT, DORA, MiFID conduct rules, and ESG disclosure obligations without requiring four separate documents.
Build a gap log format that an ACPR or EBA examiner can follow directly, so you spend examination day answering questions rather than reconstructing context.
Implement a change-notice triage protocol that routes incoming EBA and ESMA guidance to the right section of your mapping within 48 hours of publication.
Map your existing open items to the control categories examiners use, so remediation owners understand what they are closing and why.
Produce the one-page executive summary of your compliance posture that your Chief Compliance Officer can sign off on before each regulatory visit.
Set up a quarterly review cadence that keeps the mapping current without requiring a full rebuild before every audit cycle.

The 12 modules

Module 1. Why Six Trackers Break What One Document Would Fix

This module maps the structural failure of the per-regulation tracker approach and shows where it collapses under examination pressure. You will build a diagnostic of your current mapping estate, listing every active tracker, its owner, its last update date, and the examination it was last used for. By the end you will know which trackers can be consolidated, which need to stay separate, and why the consolidated version has to be built around the examiner's workflow.

Module 2. The Examiner's Document Model: What ACPR and EBA Actually Pull

Regulatory examiners at the ACPR and under EBA joint supervisory teams follow a predictable information-gathering sequence. This module reverse-engineers that sequence from published supervisory expectations and documented examination findings across the European banking sector. You will produce a one-page map of the document flow an examiner uses during a thematic review, and identify the three to five artefacts from your own mapping that appear in the first two hours of every examination.

Module 3. Building the Master Control Register: Structure and Taxonomy

The consolidated mapping document starts with a control register that all six frameworks can write into. This module covers the taxonomy decisions that make that possible: control categories, ownership fields, evidence fields, status fields, and the cross-reference columns that link each control entry to the specific article or guideline it satisfies. You will build the register skeleton for your own programme, populated with your top 20 highest-risk control areas across EBA ICT, DORA, and MiFID obligations.

Module 4. Mapping EBA ICT Risk Guidelines into the Register

EBA ICT and security risk guidelines carry specific expectations on ICT governance, third-party risk management, and incident classification that compliance specialists often map incorrectly because the guideline structure does not match standard policy categories. This module walks through the EBA ICT taxonomy, shows you exactly where each guideline article maps in your control register, and produces the first completed section of your consolidated mapping with evidence fields populated using the artefact types EBA examiners expect to see.

Module 5. Layering DORA Operational Resilience Requirements

DORA introduces operational resilience obligations that overlap with EBA ICT in some areas and diverge sharply in others, particularly on ICT third-party provider management, critical function identification, and the TLPT testing framework. This module maps every DORA article relevant to a compliance specialist's programme onto the control register built in module three, highlights the overlap zones where one piece of evidence satisfies both DORA and EBA ICT, and flags the DORA-specific gaps that require standalone remediation artefacts.

Module 6. MiFID Conduct Obligations and the Compliance Mapping Crossover

MiFID conduct obligations land in a different part of most compliance programmes than ICT risk, but the gap log for both often sits with the same compliance specialist at a bank. This module covers the MiFID conduct categories that most commonly generate examination findings, the evidence format the ESMA supervisory convergence framework expects, and the specific rows in your consolidated register where MiFID conduct obligations need their own evidence column rather than sharing one with your ICT risk entries.

Module 7. ESG Disclosure Crossovers: What the Mapping Has to Carry

ESG disclosure requirements from the SFDR, Taxonomy Regulation, and EBA Pillar 3 package land on compliance desks alongside ICT risk and conduct obligations. This module does not make you an ESG specialist. It maps the intersection points between ESG disclosure and your existing compliance framework, identifies the control register rows where ESG evidence has to appear alongside ICT and conduct entries, and shows you how to maintain those rows without a separate tracker.

Module 8. The Change-Notice Triage Protocol

EBA, ESMA, and ACPR publish guidance continuously. Most compliance specialists review it manually and decide informally whether it triggers a mapping update. This module builds a triage protocol that takes any incoming regulatory notice, classifies it against your control register taxonomy within 48 hours, assigns it to the correct register section and remediation owner, and logs it for the quarterly review. You will leave with a working triage template and the last three months of EBA publications already classified.

Module 9. Gap Log Format That an Examiner Can Follow Directly

Most gap logs are written for the compliance specialist who maintains them, not for the examiner who reads them. This module redesigns your gap log from the examiner's perspective: each open item uses the article reference they will cite, the evidence artefact they expect at close, the remediation owner, the deadline, and the risk rating. You will rebuild your ten highest-priority open items in this format and produce the two-page gap summary your Chief Compliance Officer signs before each review.

Module 10. Evidence Package Assembly for Thematic Reviews

A thematic review by ACPR or under an EBA supervisory college requires you to assemble an evidence package in advance. This module covers the package structure, the document naming conventions that examiners can navigate without your guidance, the cover note that maps each package section to the examination topic, and the internal sign-off process that certifies the package before it leaves your function. You will produce the evidence package template and the internal sign-off checklist for your next thematic review.

Module 11. The Executive Compliance Posture Summary

Your Chief Compliance Officer needs a one-page posture view before every regulatory visit. This module builds that document: a grid showing current status against each active framework, top five open items with planned close dates, examination schedule for the next two quarters, and a single sentence the board can act on. You will produce this document for your current programme and the quarterly update template that keeps it current.

Module 12. The Quarterly Review Cadence That Keeps the Mapping Current

A consolidated mapping not maintained becomes a liability faster than six separate trackers because every gap is visible at once. This module builds the quarterly review cadence: a structured session that walks every register section, updates evidence status, closes remediated gaps, opens new ones from the change-notice backlog, and produces the posture summary. You will leave with a calendar block template, a facilitator guide, and the first quarterly review completed.

How this addresses your situation

Specific modules that map to what you said you are dealing with.

Modules 1-3 diagnose why the current approach breaks and build the structural foundation of the consolidated mapping.

Modules 4-7 populate the mapping with the four framework families most active on your desk right now.

Modules 8-10 build the operational tools: triage protocol, gap log format, and evidence package assembly.

Modules 11-12 produce the management artefacts and the maintenance cadence that keeps the mapping current between examination cycles.

What you get with this course

Twelve written modules covering the full arc from diagnostic to operational mapping to executive artefacts.
Downloadable templates for every module: control register skeleton, gap log format, evidence package cover note, triage protocol, and quarterly review facilitator guide.
The hand-built implementation playbook delivered alongside your course access, built from your existing gap log and mapped to the control categories your examiners use.
Access to the Art of Service learning environment with all course materials and templates available immediately on enrolment.

What you will have in hand by Day 1, Week 1, Month 1

Course access and all module materials available immediately on enrolment.

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.

Before and after

Before

Six separate trackers, none of which is the document your examiner actually reads. Three weeks of consolidation work before every thematic review. A gap log that makes sense to you but requires 30 minutes of context-setting before a regulator can navigate it.

After

One consolidated mapping that covers EBA ICT, DORA, MiFID conduct, and ESG disclosure obligations in a format your examiner can follow directly. A triage protocol that keeps it current without a rebuild. A gap log format and evidence package template that go into the next review ready.

What happens if you do not address this

The regulatory mapping problem compounds. Each new framework that lands on your desk gets its own tracker because there is no consolidated structure to absorb it. The examination preparation cycle gets longer each year. DORA ICT third-party requirements and EBA ICT overlap zones are where most banks are generating findings right now, not because the requirements are unclear but because the mapping that should show compliance is not structured in a way the examiner can follow.

Who it is for

A compliance specialist at an international bank who owns the regulatory change programme, the gap log, and the policy mapping. You know what the frameworks say. Your challenge is keeping a living, consolidated mapping that a regulator can follow in real time, not a snapshot you rebuilt three weeks before the last examination.

Who this is NOT for. Compliance officers whose entire programme covers a single jurisdiction and a single framework. If you are not managing concurrent EBA, ACPR, and group-level requirements at the same time, this course is more infrastructure than you need right now.

How it arrives

Text-based course in the Art of Service learning environment, plus downloadable templates and worked examples for every module, plus the hand-built implementation playbook delivered alongside course access.

Time investment. Twelve modules averaging 45-60 minutes each. Most compliance specialists complete the core modules on regulatory mapping structure and the framework layers in five to seven focused sessions, then work through the operational artefact modules in parallel with their current programme.

Why $199 is the right number

Your options for building a consolidated regulatory mapping are: rebuild it yourself using published EBA and ACPR supervisory expectations as your guide (four to six weeks of senior compliance time per framework layer), contract an external firm to design the structure (typically priced as a project engagement), or take this course and build it from your existing gap log using the templates and implementation playbook delivered with access. The course is the only option that produces a working mapping, not a design recommendation.

FAQ

Is this relevant if my bank's primary supervisor is not ACPR?

Yes. The course is built around EBA guidelines, which apply to all EU-supervised institutions regardless of domestic lead supervisor. The ACPR examination workflow used as the reference case closely mirrors the supervisory approach of the DNB, BaFin, and other NCAs operating under EBA convergence expectations.

Do I need to bring my existing gap log to get value from the course?

You will get more from the implementation playbook if you bring your current gap log to the session, but the course works without it. The module templates are designed to be populated from scratch if your current mapping is not structured in a way that maps cleanly to the consolidated register format.

How specific is the DORA coverage given how recent the requirements are?

Module 5 covers the DORA articles most relevant to a compliance specialist's programme: ICT third-party provider management obligations, the critical function identification requirement, and the TLPT testing framework. It does not cover DORA implementation from an IT operations perspective. The mapping focuses on what compliance has to document and evidence, not on the technical implementation that sits in other functions.

What if my current mapping is already partially consolidated?

The diagnostic in module 1 will tell you which sections of your existing mapping can be preserved and which need to be rebuilt. The implementation playbook takes your current state as the input, not a blank slate. Most compliance specialists find that two or three of their existing tracker sections can feed directly into the consolidated register with minor reformatting.

30-day money-back guarantee. If after a week of working through the materials this is not what you needed, reply to the receipt email and a full refund is processed. No questions, no forms.

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.