• Risk Recognition and Assessment[versions up to October 2010]

    • HC-1.2.6 [versions up to October 2010]

      The Board is responsible for ensuring that the systems and controls framework, including the Board structure and organisational structure of the bank, is appropriate for the bank's business and associated risks (see HC-1.2.3 c)). The Board must ensure that collectively it has sufficient expertise to identify, understand and measure the significant risks to which the bank is exposed in its business activities.

      The Board must regularly assess the systems and controls framework of the bank. In its assessments, the Board must demonstrate to the CBB that:

      a) The bank's operations, individually and collectively are measured, monitored and controlled by appropriate, effective and prudent risk management systems commensurate with the scope of the bank's activities; and
      b) The bank's operations are supported by an appropriate control environment. The compliance, risk management and financial reporting functions must be adequately resourced, independent of business lines and must be run by individuals not involved with the day-to-day running of the various business areas. The Board must additionally ensure that management develops, implements and oversees the effectiveness of comprehensive know your customer standards, as well as on-going monitoring of accounts and transactions, in keeping with the requirements of relevant law, regulations and best practice (with particular regard to anti-money laundering measures). The control environment should maintain necessary client confidentiality and ensure that the privacy of the bank is not violated, and ensure that clients rights and assets are properly safeguarded.
      c) Where the Board has identified any significant issues related to the bank's adopted governance framework, appropriate and timely action is taken to address any identified adverse deviations from the requirements of this Module.
      October 07

    • HC-1.2.7 [versions up to October 2010]

      In its review of the systems and controls framework in Paragraph HC-1.2.6, the Board must:

      a) Make effective use of the work of external and internal auditors. The Board must ensure the integrity of the bank's accounting and financial reporting systems through regular independent review (by internal and external audit). Audit findings must be used as an independent check on the information received from management about the bank's operations and performance and the effectiveness of internal controls; and
      b) Make use of self-assessments, stress/scenario tests, and/or independent judgments made by external advisors. The Board may appoint supporting committees, and engage senior management to assist it in the oversight of risk management; and
      c) Ensure that senior management have put in place appropriate systems of control for the business of the bank and the information needs of the Board; in particular, there must be appropriate systems and functions for identifying as well as for monitoring risk, the financial position of the bank, and compliance with applicable laws, regulations and best practice standards. The systems must produce information on a timely basis.
      October 07