A free BCRA reference matrix does not change the law, but it can reduce one of finance’s quietest risks: losing track of which cyber, fraud, and resilience rules actually apply.