United Kingdom

UK Open Banking Standard

25 controls. 193 other frameworks in our corpus share controls with it. Here is all of it, and how much of it you are already doing.

Page built . This page is derived from the framework corpus, which changes when the corpus is extended rather than daily.

25 controls 193 frameworks share controls with it United Kingdom verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

There is no implementation kit for this framework yet. The control list and the overlap above are free and complete.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you runShared controls
SSAE 188measure it →
DAMA-DMBOK27measure it →
NIST Privacy Framework7measure it →
Singapore Government Instruction Manual on ICT&SS Management (IM8)7measure it →
ASD Strategies to Mitigate Cyber Security Incidents7measure it →
NIST Cybersecurity Framework 2.07measure it →
O-RAN WG11 Security Specification7measure it →
FTC GLBA Safeguards Rule (16 CFR Part 314)7measure it →
ISO/IEC 27400:20227measure it →
South Korea ISMS-P7measure it →
Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023)6measure it →
FFIEC IT Examination Handbook6measure it →

Every control

CodeControlAlso in
OB-API.1Read/Write API Specification0
OB-API.2Open Data API Specification33
OB-API.3Dynamic Client Registration0
OB-API.4MI Reporting Specification37
OB-CX.1Explicit Customer Consent0
OB-CX.2Granular Consent Management63
OB-CX.3Strong Customer Authentication50
OB-CX.4Consent Dashboard0
OB-CX.5Consent Revocation0
OB-DIR.1Open Banking Directory50
OB-DIR.2Participant Onboarding0
OB-DIR.3Software Statement Assertions0
OB-DIR.4Dispute Management0
OB-OPS.1API Availability Requirements37
OB-OPS.2Performance Standards114
OB-OPS.3CMA9 Conformance Monitoring0
OB-OPS.4Incident Management77
OB-SEC.1FAPI Security Profile Compliance0
OB-SEC.2Transport Layer Security69
OB-SEC.3OAuth 2.0 and OpenID Connect0
OB-SEC.4Certificate Management85
UKOBS-1Open Banking Scope and Participant Status0
UKOBS-2FAPI 2.0 + SCA + API Specifications0
UKOBS-3Consent Management and Data Sharing0
UKOBS-4Variable Recurring Payments (VRPs) and Open Finance0

Tell me when UK Open Banking Standard files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What an auditor will ask you to produce

The artefacts named on the failure modes this framework speaks to.

  • Evidence of executive or risk owner approval
  • Operational records demonstrating execution
  • Independent assurance or review report
  • Documented procedure addressing uk-specific exemptions
  • Documented procedure addressing lawful bases and conditions
  • Documented procedure addressing content moderation information
  • Consent capture mechanism design records
  • Consent log with timestamp and purpose linkage
  • Withdrawal workflow evidence
  • Privacy notice version aligned to consent text

How programmes fail on this

Failure modes named by this framework and others. Each opens the full record.

What this page is

A control-level reference for UK Open Banking Standard, drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition