Sapin II Pillar 8 - Internal Monitoring + Continuous Improvement (Dispositif de controle et evaluation interne). REQUIREMENTS: (a) ONGOING MONITORING through KPIs + KRIs + dashboards + management reviews + audit committee briefings; (b) PERIODIC INTERNAL AUDITS of the 8-pillar program + sample testing of controls; (c) THIRD-PARTY ASSESSMENT - at least annual + after major incidents + by external consultants where appropriate; (d) MANAGEMENT REVIEW - the chief executive + Board of Directors must review program performance annually with documented findings + corrective actions; (e) CONTINUOUS IMPROVEMENT - lessons-learned from incidents + audits + AFA feedback + regulatory developments + industry benchmarks (e.g. OECD Anti-Bribery Convention + UNCAC + ISO 37001) drive program updates; (f) MATURITY ASSESSMENT against AFA Recommendations + benchmarks (e.g. ISO 37001 + COSO + SCCE); (g) BENCHMARK comparison with peers + industry standards. REPORTING: annual program report to the Board + summary to AFA on request + during inspection.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.