Assessment: Mittenda Limited IE · Regulation: EU 2023/1113 · Roles: PSP, Intermediary PSP, CASP, Intermediary CASP
Stage 1 — Communication & Consultation
ISO 31000:2018 §6.2 — Communication and consultation — what this requires
ISO 31000:2018 §6.2 — Communication and consultation
Communication and consultation assist relevant stakeholders in understanding risk, the basis on which decisions are made and the reasons why particular actions are required. Communication and consultation with appropriate external and internal stakeholders should take place within and throughout all steps of the risk management process.
Both a stage in its own right and a cross-cutting record: every stage and phase sign-off decision (approve / reopen) auto-logs here, alongside the events you record by hand — so stakeholders can see the basis on which decisions were made. Stage state: In progress
Communication & consultation events
The record of communication (one-way, to promote awareness) and consultation (two-way, to obtain feedback) activity — who was addressed, what was communicated, and the feedback received. Rows are read-only; use the pencil to edit, or add a new event.
No communication or consultation events recorded yet.
Stakeholder roster
The stakeholders involved in or affected by the assessment. Captured during Context → Stakeholders; mirrored here read-only because communication and consultation activity flows through this roster. Edit the roster on the Context page.
-
BoardApproves the business-wide financial crime risk assessment
-
Chief Operating OfficerApprover of the Payments Operations Procedure
-
digital-asset operations leadApproves outbound crypto-asset transfers above EUR 15,000
-
Head of ComplianceOwner of the Record Retention Policy
-
Head of Digital Asset OperationsOwner of the Crypto-Asset Transfer Operations Procedure
-
Head of Financial Crime (MLRO)Owner of MTD-STD-04; receives escalations on repeatedly failing counterparties
-
Head of Payments OperationsOwns completion of the CDD review cycle; maintains the customer account record
-
Head of RiskOwner of the Risk Appetite Statement
-
Risk and Compliance CommitteeApproving body for MTD-STD-04
-
the BoardApproves the AML/CTF Policy and considers the business-wide risk assessment against appetite
How communication & consultation shows up across the other stages
Communication & consultation isn't a one-off stage — it runs through every other process. Each stage's sign-off transition (lock / approve / reopen) is a communication event addressed to the relevant stakeholders, and lands on the audit log with the signing party + rationale recorded.
- Stage transitions — every Lock / Approve / Reopen
writes a
ProcessStageTransitionentry to the audit log naming the stage, the signing party (on Approve), and the rationale (on Reopen). Reviewable end-to-end on the Audit log report and the Management report's process stage status section. - Reassessment triggers — logged on the Monitoring & Review hub with the trigger reason and affected stages, then broadcast as part of monitoring & review activity.
- Stakeholder roster — the read-only mirror above. Phase 4b.x will surface notification subscriptions per stakeholder; today, communication flow is implied by the line-of-defence attribution + the audit trail.
Communication & Consultation sign-off
Communication and consultation runs continuously alongside the other stages. Lock when the stakeholder roster + comms approach are stable enough to baseline.