Writing a control your team will run: a 30-minute session for control owners
This is a 30-minute session a risk team can run with any business team that owns controls. It covers what a control is and how to write one a person can run on a busy Tuesday. It also covers what evidence to keep, and who does, checks and approves the work. Every attendee leaves with one of their own controls rewritten on a one-page card. It is written for the claims, underwriting, operations and delegated authority teams who do the work, and for the risk team that runs the session with them. It works with any system, including a spreadsheet. You get 10 slides, one page of facilitator notes and the control card worksheet.
- For Operations, Claims, Underwriting, Delegated authority
- Format Training pack: 10 slides, facilitator notes and worksheet
- Sources checked 15 Oct 2026
- New
What is inside
- The session plan: 30 minutes, minute by minute
- Ten slides, with what each one says
- The control card: eight fields, each with a test
- A worked rewrite: one weak control made runnable
- Facilitator notes: before, during and after
- The worksheet (fillable PDF and XLSX)
A sample
Before: "Bordereaux are reviewed for accuracy."
After: "On the 5th working day of each month, the DA analyst checks each coverholder's risk bordereau against its binding authority: class, territory, limit and premium cap. Any line outside authority goes on the breach log and to the class underwriter the same day. Evidence: the completed check sheet and the breach log entry. The DA manager reviews the check sheet within five working days."The first version names no person, no date and no evidence. Nobody can run it, and nobody can check it.
Sources
FCA, Operational resilience: insights and observations one year on, 27 March 2026. FCA PS26/6 and PRA PS12/26, 22 April 2026. Checked 15 October 2026.
See it worked through at Halden, our fictitious Lloyd's managing agent