Comment from Kevin Gregory

Summary: The commenter argues that the proposed regulations add significant administrative burdens without providing the necessary operating standards, risk-based thresholds, or validation procedures to make the new controls effective. They recommend specific revisions, such as phased implementation and clearer documentation requirements, to ensure that the rules actually reduce fraud risk rather than just creating "boilerplate" compliance exercises.