verify the existence in the entity of a specific process for the Operation risk identification;
. verify that it ensures that the OPeration risk function is able to identify any weaknesses;
. observe that this process is well documented; and
. the OPeration risk function has implemented control procedures that reflect the entity’s objectives and the regulatory structure.