CRA-6.1.9
  The processes and systems required must enable the 
  (a) Counterparty risk;
  (b) Market risk (for accepted crypto-assets );
  (c) Liquidity risk;
  (d) Operational risk including cyber security risk ;
  (e) Outsourcing risk;
  (f) Group risk; and
  (g) Any additional categories relevant to its business.
  Added: April 2019
 
  
        