Flagship course
Issuing Control Audit Lab
A facilitated path through card issuing control audits for fintech — written findings, not slide decks.
Learning outcomes
- Map control owners across sponsorship, authorization, limits, disputes, and tokens.
- Design samples that survive daypart and partner-API volume swings.
- Draft findings that name evidence gaps without theatrical language.
- Facilitate a short readout that product and risk can both sign.
Informational pricing
Control Studio enrollment is listed at ₩2,450,000 per seat. No checkout on this site — confirm seats via contact.
Instructor
Soo-jin Han
Former issuer control reviewer; facilitates cohorts from Busan with guest hours for Seoul-based teams.
Modules
- 01
Control map & sponsorship evidence
BIN relationships, delegation letters, and what “owned” means in practice.
- 02
Authorization drift
Comparing decision codes across releases and partner endpoints.
- 03
Limit engine exceptions
Override paths, dormant rules, and who can change them.
- 04
Sampling for evidence
Sizing windows when volume is uneven.
- 05
Dispute evidence map
Reason codes, ops notes, and packet completeness.
- 06
Token lifecycle logs
Provisioning, suspend, and delete events as control signals.
- 07
Finding voice
Writing for auditors and for product partners in parallel.
- 08
Readout rehearsal
Facilitating a 20-minute leadership briefing.
- 09
Capstone memo
One control family, full evidence trail, peer critique.
FAQ
Do I need prior issuer experience?
You should have worked with payments or risk data before. Pure beginners struggle with the week-two homework volume.
Is this a certification?
No. You receive a completion note and a reviewed capstone. We do not sell network certifications.
What is a real limitation of this lab?
We do not provide access to live card-network portals or production logs from your employer. You must bring sanitized extracts or use our anonymized packs. Teams that cannot share any evidence still learn the method, but their capstone will be less specific to their stack.
Are sessions recorded?
Office hours are recorded for enrolled seats. Live workshops are not redistributed outside the cohort.
Reviews from this course
The Finding Voice module changed how I title issues. Shorter, sharper, fewer adjectives.
I wanted more Korea-specific prepaid examples in module six. The method still transferred, and the Token Lifecycle Logs worksheet is now on our wiki.