• OM-2.3 OM-2.3 Identification, Measurement, Monitoring and Control

    • OM-2.3.1

      As part of an effective operational risk management system, banks must:

      (a) Identify critical processes, resources and loss events;
      (b) Establish processes necessary for measuring operational risk;
      (c) Monitor operational risk exposures and loss events on an on-going basis; and
      (d) Develop policies, processes and procedures to control or mitigate operational risk.
      October 07

    • OM-2.3.2

      Banks should assess the costs and benefits of alternative risk limitation and control strategies and should adjust their operational risk exposure using appropriate strategies, in light of their overall risk profile.

      Amended: January 2012
      October 07