The CRO must have sufficient organisational stature, authority, seniority within the organisation and necessary skills to oversee the Conventional bank licensee's risk management activities.