Module M1 · M2 · M3
Skill engine and composition
Autonomy: L2
Meridian Trust Bank1 Nov 2025 – 31 Oct 2026
Skills in Library
12
9 active · 3 in review or draft
Clauses 4–10
7
SE-01 complete for Phase 1
Annex A Controls
15/ 25
Remaining 68 controls in P2–P3
Avg Acceptance by Auditors
89%
SL-08 quality metric (continuous eval)
Skill Library
Skills are versioned data, not hardcoded logic. Each carries an owner, approver, and validation test suite.
MS-9.2-INTERNAL-AUDITActive
Internal audit programme
corev1.0.1all
ISO 27001:2022 9.2 · ISO 19011:2018
MS-6.1.2-RISK-ASSESSMENTActive
Risk assessment process
corev1.1.0all
ISO 27001:2022 6.1.2 · ISO/IEC 27005:2022
MS-6.1.3-SOAActive
Risk treatment and Statement of Applicability
corev1.0.2all
ISO 27001:2022 6.1.3 · ISO 27002:2022
TECH-5.18-ACCESS-RIGHTSActive
Access rights — provisioning, review and removal
corev1.2.0all
ISO 27001:2022 A.5.18 · ISO 27002:2022 5.18
BANK-LEAVER-ACCESSActive
Contractor & third-party leaver handling (banking)
domainv0.9.2banking
RBI cyber security framework 8.3 · ISO 27001:2022 A.5.19
TECH-8.15-LOGGINGActive
Event logging, protection and review
corev1.2.0all
ISO 27001:2022 A.8.15 · ISO 27002:2022 8.15
TECH-8.8-VULN-MGMTActive
Technical vulnerability management
corev1.0.4all
ISO 27001:2022 A.8.8
TECH-8.5-AUTHUnder Review
Secure authentication
corev1.1.0-rc1all
ISO 27001:2022 A.8.5
TECH-8.7-MALWAREActive
Protection against malware
corev1.0.0all
ISO 27001:2022 A.8.7
METH-19011-SAMPLINGActive
Sampling and evidence evaluation method
methodv1.3.0all
ISO 19011:2018 · ISO/IEC 27007:2020
BANK-HSM-KEYMGMTDraft
HSM and key management (banking)
domainv0.3.0-draftbanking
ISO 27001:2022 A.8.24 · PCI DSS 3.x
TECH-7.2-PHYSICALDraft
Physical entry controls
corev0.1.0-draftall
ISO 27001:2022 A.7.2
Skill Composer — Core + Method + Domain + Client
SE-08: Dynamically merges core controls with industry domain packs and audit methodologies at runtime.
TECH-5.18-ACCESS-RIGHTS · v1.2.0
Access rights — provisioning, review and removal
core layer · ISO 27001:2022 A.5.18
BANK-LEAVER-ACCESS · v0.9.2
Contractor & third-party leaver handling (banking)
domain layer · RBI cyber security framework 8.3
METH-19011-SAMPLING · v1.3.0
Sampling and evidence evaluation method
method layer · ISO 19011:2018