Readiness assessment

Where does your firm fall short of a standard the regulator has already published?