URDAD for financial services
Change your processes at the pace of the business, with the evidence an auditor or regulator asks for kept current as a by-product.
Financial institutions change their processes under scrutiny. URDAD keeps the evidence of what was required, how it is met, who approved it and how it was tested in the model itself, current and in one place.
Every change, evidenced
Every change is made in a project, reviewed and signed off before it takes effect, and recorded. A project falling under a regulatory regime, e.g. DORA, GDPR or POPIA, carries the checklists your auditors maintain for it.
In the manual: regulatory regimes
“Why does this step exist?”
Every step of a process is traced to the requirement it meets, and every formal requirement can cite the informal one it was written from. The auditor’s question is answered from the model.
Third parties held to contract
Every answer a provider gives, whether a person’s, an existing system’s or a partner’s, is checked against the service’s contract, and a broken one names the party at fault. Third-party oversight, e.g. under DORA, can thus rest on every answer being checked rather than on a sample.
In the manual: contract violations
Tested to the depth a regulator asks
Tests are generated from the contracts, and the report measures coverage of every refusal and every branch, condition by condition where a regime demands it. Signed by the environment which produced it, the report is what a project’s testing is signed off on.
Personal data by design
Identities in durable records are pseudonymised and can be erased. Each stored field exists because a service uses it, and the tool reports data which none uses.
In the manual: data protection
On your own infrastructure
The suite runs on your infrastructure or hosted for you alone, signs people in through your identity provider, and streams its audit log to your SIEM.
In the manual: deployment models
See it in a bank and an insurer
The simple bank and the motor insurer are modelled in full, and open in the playground.
The tool certifies nothing itself. It keeps the evidence your organisation needs in order to do so.