3. Allocation of operational risk capital to major business lines.
4. Incentives to improve the management of operational risk.
5. Regular reporting of operational risk exposures and procedures for taking
appropriate action.
6. Documented operational risk management process.
7. Routine for ensuring compliance with internal policies, controls and
procedures.
8. Regular reviews of the ORM processes and measurement system by
internal & external auditors.
9. Validation of the operational risk measurement system by supervisory bodies.