Question 1 of 12 · Entitlements
“When one of your agents takes an action, what identity does it act under?”
Nothing you answer is sent anywhere. There is no endpoint behind this page — you can check the network tab.
Examination
Twelve questions. Find out which ones you cannot answer.
Every other assessment here asks you to score yourself. This one puts you on the other side of the table — because the gap between having a control and being able to evidence it is the whole subject, and it only becomes obvious when someone asks the second question.
How this is built
Every question derives from a published supervisory expectation, and the source is shown with each one. Nothing here is invented to make a point — an examiner-in-a-box asking made-up questions would be exactly the unaccountable automation this practice argues against.
Saying yes never ends a question. It triggers the request an actual reviewer would make next, because claiming a control is easy and producing the evidence is not. Most programmes survive the first question and come apart on the second, which is precisely what happens in the room.
“Not certain” counts as a finding. That is the honest reading rather than a harsh one — a reviewer does not record that a firm was unsure, they record that the evidence was not produced. Softening it here would make this comfortable and useless.
What it covers
Entitlements · 3 questions
Policy enforcement · 3 questions
Attestation & audit · 3 questions
Model risk governance · 3 questions
Want a score rather than a cross-examination? The diagnostic assesses the same four layers and produces a report you can circulate.