HC-6.6.1
  
  (a) active Board and senior management  oversight;
  (b) independent risk management function;
  (c) a Board driven sound risk management culture that is established throughout the bank;
  (d) appropriate policy, procedures and limits;
  (e) comprehensive and timely identification, measurement, mitigation, controlling, monitoring and reporting of risks;
  (f) appropriate management information systems ('MIS') at a business and bank-wide level; and
  (g) comprehensive internal controls.
  Added: July 2018
 
  
        