Regulation (Layer 2)
A binding, detailed rule made by an agency under powers granted by statute. The second of the five layers.
Overview
Regulations turn statutory mandates into specific, testable requirements: thresholds, timelines, disclosures, record-keeping duties and procedures.
Examples include the US consumer financial regulations B, C, E, DD, P, V, X and Z, FDA regulations in healthcare, FAA regulations in aviation and FERC regulations in energy. In the EU, regulatory and implementing technical standards play a similar role.
It connects most directly to The five layers of obligation, Rulemaking, Regulation E and Regulation Z.
Check the official sources below for legal scope, applicable dates and exceptions. This entry is an explanatory reference, not legal advice.
Why it matters
Regulations are where most day-to-day obligations live, and where controls are most directly mapped.
Who it affects
All regulated organisations.
Where it sits
Ten linked steps connect where you operate to the proof that you complied.
- 01Jurisdiction
- 02Industry
- 03Activity
- 04Authority
- 05Regulation
- 06Requirement
- 07Guidance
- 08Control
- 09Evidence
- 10Enforcement
Connections
The terms most closely tied to Layer 2. Select one to open it.
What to do about it
- 1Tag every obligation with the layer it came from.
- 2Watch the faster-moving layers more closely.
- 3Trace each lower-layer obligation back to its source.
From requirement to evidence.
Regulations are parsed into individual obligations, each linked to the controls that meet it.
Request early access →