OM-2.3.1
As part of an effective operational risk management system, banks must:
(a) Identify critical processes, resources and loss events;
(b) Establish processes necessary for measuring operational risk;
(c) Monitor operational risk exposures and loss events on an on-going basis; and
(d) Develop policies, processes and procedures to control or mitigate operational risk.
October 07