Operational Risk Governance:Sound Practices for the Management and Supervision of Operational Risk BIS June 2011
The Board of Directors
Principle 3: The board of directors should establish, approve and periodically review the Framework. The board of directors should oversee senior management to ensure that the policies, processes and systems are implemented effectively at all decision levels.
Principle 4: The board of directors should approve and review a risk appetite and tolerance statement for operational risk that articulates the nature, types, and levels of operational risk that the bank is willing to assume.
Senior Management
Principle 5: Senior management should develop for approval by the board of directors a clear, effective and robust governance structure with well defined, transparent and consistent lines of responsibility. Senior management is responsible for consistently implementing and maintaining throughout the organisation policies, processes and systems for managing operational risk in all of the bank’s material products, services and activities, consistent with the risk appetite and tolerance.
Risk Management Environment
Identification and Assessment
Principle 6: Senior management should ensure the identification and assessment of the operational risk inherent in all material products, activities, processes and systems to ensure the inherent risks and incentives are well understood.
Principle 7: Senior management should ensure that there is an approval process for all new products, activities, processes and systems that fully assesses operational risk.
Monitoring and Reporting
Principle 8: Senior management should implement a process to regularly monitor operational risk profiles and material exposures to losses. Appropriate reporting mechanisms should be in place at the board, senior management, and business line levels that support proactive management of operational risk.
Control and Mitigation
Principle 9: Banks should have a strong control environment that utilises: policies, processes and systems; appropriate internal controls; and appropriate risk mitigation and/or transfer strategies.
Business Resiliency and Continuity
Principle 10: Banks should have business resiliency and continuity plans in place to ensure an ability to operate on an ongoing basis and limit losses in the event of severe business disruption.
Role of Disclosure
Principle 11: A bank’s public disclosures should allow market participants to assess its approach to operational risk management.
POST COMMENT
COMMENTS(0)
No Comment yet. Be the first :)