2.2 Operational risk identification
The New Capital Accord demands a continuous, systematic and complete identification of the ORs.
So, audit should:
. verify the existence in the entity of a specific process for the OR identification;
. verify that it ensures that the OR function is able to identify any weaknesses;
. observe that this process is well documented; and
. the OR function has implemented control procedures that reflect the entity’s objectives and the regulatory structure.
To achieve this, the auditor should:
. analyze the quality of the documentation which supports the OR identification process; and
. verify, in time and form, the consistency and integrity of the process.