OM-8.1.3
Operational risk is inherent in all banking products, activities, processes and systems, and the effective management of operational risk must be a fundamental element of a bank's risk management programme. Sound operational risk governance relies upon three lines of defence:
(a) Business line management;
(b) An independent operational risk management function; and
(c) Independent review functions.
Added: October 2012