OM-1.3.1
As part of an effective operational risk management system, banks should:
(a) identify critical processes, resources and loss events;
(b) establish processes necessary for measuring operational risk;
(c) monitor operational risk exposures and loss events on an on-going basis; and
(d) develop policies, processes and procedures to control or mitigate operational risk.