Test ICT controls
CONTROLEvaluate actual operational data, investigate exceptions and derive necessary changes from the results.
Operations
Specialist work becomes an ongoing operation. Pandect builds recurring tasks as operations in your infrastructure and carries them through to a defined completion.
An operation is repeatable.
It starts with a trigger, follows clear logic and always ends unambiguously. In between, cases are processed, decisions prepared, measures implemented and exceptions handled until the agreed completion is fully achieved.
What Pandect takes on.Examples from ongoing operations.
For banks, investment firms, payment institutions, e-money institutions and crypto-asset service providers.
Your operationSchedule a ConversationLet’s Solve It
Show us where work gets stuck. Together, we determine what needs to change and what Pandect can take on.
Digital resilience & ICT
DORA
Manage digital risks in ongoing operations. Scope follows applicable requirements, critical functions and the size of the institution.
Manage incidents
REMEDIATIONClassify incidents, consolidate information for required reports and track actions through to completion.
Follow through on resilience testing
REMEDIATIONAssess test results, prioritise weaknesses and coordinate remediation with the responsible teams.
Providers & outsourcing
DORA for ICT services. Other requirements depend on the outsourcing arrangement.
Oversee external services effectively. ICT services and other outsourcing arrangements are assessed against their respective requirements.
Assess critical provider changes
CHANGEAnalyse changes to contracts, services or subcontractors, assess their impact and coordinate necessary actions.
Review critical providers periodically
OUTSOURCINGReview performance, dependencies, risks and agreed actions regularly and incorporate changes into ongoing oversight.
Maintain information registers
CONTROLConsolidate contract data and dependencies, resolve data gaps and keep the register of ICT services up to date.
Investment services & investor protection
MiFID II
Put regulatory requirements into practice across advice, distribution and product governance. Scope depends on the services, client groups and products involved.
Review product governance
EFFECTIVENESSCompare target markets, distribution and actual client outcomes and identify necessary changes to products or distribution.
Review suitability and appropriateness
CONTROLReconcile client information, assessments and documentation for each service, identify gaps and coordinate necessary corrections.
Review best execution
EFFECTIVENESSCompare execution data against agreed criteria, investigate anomalies and follow through on required changes.
Financial crime & AML
Applicable requirements for preventing money laundering
Make checks effective and backlogs manageable. Specialist assessments and key decisions remain with the responsible people at the institution.
Calibrate AML scenarios
EFFECTIVENESSAnalyse alerts, false positives and backlogs, adjust thresholds and measure the impact again.
Clear AML backlogs
REMEDIATIONPrioritise open cases, consolidate information, prepare assessments and work through backlogs systematically through to a decision.
Update client information
CONTROLIdentify missing information, reconcile documents and coordinate updates to existing client records through to completion.
Crypto services & client assets
MiCAR for crypto services. Safeguarding requirements depend on the business model.
Protect client assets with traceable controls. Applicable requirements depend on authorisation, the services provided and the assets held.
Reconcile client funds
CONTROLReconcile balances and accounts, investigate differences, identify causes and carry out necessary corrections.
Review custody processes
CONTROLReconcile client holdings, allocation and records, investigate discrepancies and coordinate required actions.
Implement MiCAR requirements
CHANGETranslate applicable requirements into concrete workflows, controls and responsibilities and test their implementation against real cases.
Regulatory change & remediation
Across applicable regulatory frameworks
Turn new requirements and identified deficiencies into working processes. Every engagement starts with a clearly defined task and an agreed outcome.
Implement regulatory changes
CHANGEDetermine what is affected, implement necessary changes to workflows, systems and responsibilities and verify their impact.
Close findings
REMEDIATIONIdentify causes, establish the affected population, coordinate actions and drive remediation through to completion.
From target state to operations.
The defined target state becomes an ongoing regulatory operation in which necessary changes are implemented, responsibilities clarified and the work carried through to a proven result.
Schedule a ConversationLet’s Solve It
Every operation is built and operated
for your environment.
Pandect combines process logic, data, systems and selected models into an ongoing operation. It is built on site together with your specialist teams and subsequently operated by Pandect or your teams.
Implement process logic
Workflows, criteria and decision points are implemented so recurring cases are handled consistently and exceptions are escalated.
Integrate systems
Relevant data from existing sources is connected so decisions are made on the same up-to-date information and measures are triggered.
Embed models
Local models support the interpretation of documents, cases or language where needed, while clear rules and repeatable steps are executed deterministically and remain traceable in operation.
Run directly in your infrastructure
Whether on-premises, isolated or internally operated, the operation stays where data, permissions and institutional control remain within the institution itself.
