TREASURY OPERATIONSREVIEW

The operating record for cash, risk, and control.

Authority library

Standards and payment-rails record

Each record preserves the issuing authority, jurisdiction, instrument or authority type, legal or operating status, version and application dates, affected audience, workflow mapping, source link, and interpretation boundary.

Global financial messaging communities · International financial messaging standard

ISO 20022

ISO 20022 provides a common methodology, business model, and message repository for financial communications.

Maintained standard and message repositoryInternational Organization for Standardization and ISO 20022 Registration Management Group

Swift cross-border payment and reporting community · Financial messaging market-practice programme

Swift CBPR+

Swift's CBPR+ programme applies ISO 20022 messages and market-practice rules to cross-border payments and cash reporting.

Current operating market practiceSwift

Fedwire Funds participants and connected customers · U.S. high-value payment-service implementation

Fedwire Funds ISO 20022

The Federal Reserve migrated the Fedwire Funds Service to ISO 20022 messages and maintains implementation resources.

Implemented operating formatFederal Reserve Financial Services

ACH network participants and originators under applicable roles · U.S. ACH network operating rules

Nacha Operating Rules

Nacha maintains operating rules for ACH entries, participants, warranties, authorization, returns, risk, and related processes.

Current maintained operating rulesNacha

Payment service providers and users in scope under the regulation · Binding EU regulation

EU Instant Payments Regulation

The regulation introduces requirements around sending and receiving instant euro credit transfers, charges, and verification of payee.

Published with phased obligationsEuropean Union

Financial entities and relevant ICT third parties within scope · Binding EU financial-sector regulation

DORA

DORA establishes requirements for ICT risk management, incident reporting, resilience testing, third-party risk, and oversight in the financial sector.

Applicable regulationEuropean Union

FCA-regulated firms in scope · UK regulatory policy and supervisory record

FCA operational resilience

The FCA requires in-scope firms to identify important business services, set impact tolerances, map dependencies, test, and remediate vulnerabilities.

Current supervisory frameworkUK Financial Conduct Authority

Organizations designing and evaluating internal control · Internal-control framework

COSO Internal Control

COSO organizes internal control around environment, risk assessment, control activities, information and communication, and monitoring.

Current framework and guidanceCommittee of Sponsoring Organizations of the Treadway Commission

Organizations managing risk · International guidance standard

ISO 31000:2018

ISO 31000 provides principles, a framework, and a process for managing risk.

Published and confirmed standardInternational Organization for Standardization

Organizations establishing a business-continuity management system · International management-system requirements standard

ISO 22301:2019

ISO 22301 specifies requirements for a business-continuity management system.

Published and confirmed standardInternational Organization for Standardization

Organizations establishing an information-security management system · International management-system requirements standard

ISO/IEC 27001

ISO/IEC 27001 specifies requirements for an information-security management system.

Current published editionInternational Organization for Standardization and International Electrotechnical Commission

Organizations subject to U.S. sanctions requirements or managing related exposure · U.S. sanctions-compliance framework

OFAC Framework

OFAC describes management commitment, risk assessment, internal controls, testing and auditing, and training as essential components.

Current official frameworkU.S. Department of the Treasury Office of Foreign Assets Control

Entities applying IFRS within their reporting requirements · International financial-reporting standard

IFRS 9

IFRS 9 addresses classification and measurement, impairment, and hedge accounting for financial instruments.

Current issued standardInternational Accounting Standards Board

Entities applying U.S. GAAP to derivatives and hedging · U.S. accounting standards topic

ASC 815

ASC 815 contains U.S. GAAP requirements for derivatives and hedge accounting.

Current codification topicFinancial Accounting Standards Board

Registered money-market funds and related participants within scope · U.S. securities regulation

SEC money-market fund reforms

The SEC adopted reforms concerning liquidity fees, redemption gates, liquidity requirements, reporting, and related money-market fund controls.

Final rule with phased complianceU.S. Securities and Exchange Commission

Global systemically important banks and other institutions as applied by supervisors · Supervisory principles

BCBS 239

BCBS 239 sets principles for governance, data architecture, accuracy, integrity, completeness, timeliness, adaptability, reporting, and supervisory review.

Current supervisory principlesBasel Committee on Banking Supervision

Audits of issuers when the standard applies · U.S. public-company auditing standard

PCAOB AS 2201

AS 2201 establishes requirements for audits of internal control over financial reporting integrated with financial-statement audits.

Current auditing standardPublic Company Accounting Oversight Board

Parties using the definitions in relevant derivatives documentation · Market documentation and definitions

2021 ISDA Definitions

The 2021 ISDA Definitions provide standardized terms for interest-rate derivatives documentation.

Current published definitions with maintained supplementsInternational Swaps and Derivatives Association

Entities storing processing or transmitting payment account data within scope · Industry data-security standard

PCI DSS

PCI DSS defines technical and operational requirements for protecting payment account data.

Current maintained standardPCI Security Standards Council

How to read the library

Binding requirements, official guidance, technical standards, implementation guides, program rules, and authority data are not interchangeable. Each page names the source class and states what it can and cannot establish about an organization or product.