OM-1.1.2
Operational risk is inherent in all types of bank activities, and can result in substantial losses. Sound operational risk governance, therefore, relies upon three lines of defence:
(a) Business line management;
(b) An independent operational risk management unit; and
(c) Internal Audit and functions that provide independent assurance.
Added: January 2020