Control matrix
Risk cluster / region / posture
AMER policy
Highest exposure concentration with stable control coverage.
EMEA trading
Review cadence is healthy, but one workflow needs escalation.
APAC liquidity
Moderate exposure and low control drift this cycle.
Vendor oversight
Strong posture overall with one repeat exception theme.