Enforcement autopsies

What actually failed, and what would have caught it.

Every consent order is a list of controls that were missing on the day it mattered. These are teardowns of published actions, drawn only from the regulator’s own document. Where a failure maps to a control we ship, we say so. Where it does not, we say that too.

No teardowns are published yet.