Islamic bank licensees must have in place a comprehensive risk management and reporting process, including appropriate board and senior management oversight to identify, measure, monitor, report and control the categories of risk relevant to their business, and where appropriate, to hold adequate capital against these risks. The risk management function must have an appropriate standing and authority within the bank and must be actively involved at an early stage in elaborating the bank's risk strategy and in all material risk management decisions.