The Control That Lived on Paper: What the Resorts World Sentosa Censure Teaches About Implemented Controls
Singapore censured Resorts World Sentosa not for lacking an internal control, but for failing to implement one it had already designed and had approved. The membership-status check existed in policy; a single configuration error meant it did not run as approved in the system. For surveillance and compliance leaders, the RWS case is the cleanest recent illustration of the gap between an approved control and a working one — and a template for the audit every department should run on itself.