Policy, Procedures, Limits and Controls
HC-6.6.26
An
Islamic bank licensee's policy and procedures must provide specific guidance for the implementation of broad risk management strategies and must establish, where appropriate, internal limits for the various types of risk to which the bank may be exposed. These limits must consider the bank's role in the financial system and be defined in relation to the bank's capital, total assets, earnings or where adequate measures exist, its overall risk level.Added: July 2018HC-6.6.27
An
Islamic bank licensee's policy, procedures and limits must:(a) Provide for adequate and timely identification, measurement, monitoring, control and mitigation of all risks, including the risks posed by its lending, investing, trading, securitisation, off-balance sheet, fiduciary and other significant activities at the business line and bank-wide levels;(b) Ensure that the economic substance of a bank's risk exposures, including reputational risk and valuation uncertainty, are fully recognised and incorporated into the bank's risk management processes;(c) Be consistent with the bank's stated goals and objectives, as well as its overall financial strength;(d) Clearly delineate accountability and lines of authority across the bank's various business activities, and ensure there is a clear separation between business lines and the Risk Management function;(e) Escalate and address breaches of internal position limits;(f) Provide for the review of new businesses and products by bringing together all relevant risk management, control and business lines, to ensure that the bank is able to manage and control the activity, prior to it being initiated; and(g) Include a schedule and process for reviewing the policy, procedures and limits, and for updating them as appropriate.Added: July 2018