Role of the board and senior management. One of the most important factors in successfully adopting and implementation an effective Operation risk framework is the manner of the participation and involvement of the Board and the Senior Management. The internal auditors will verify that the:
. Board approves the implementation of a firm-wide framework to explicitly manage operation risk. The framework should be based on an appropriate definition of Operation risk, cover the bank’s appetite and tolerance for Operation risk and include specific policies for managing this risk.
. Senior management has responsibility for implementing the framework and for developing the policies, processes and procedures for managing Operation risk.
. Manuals of policies, processes and procedures. Senior management should translate the Operation risk management framework into specific policies, processes and procedures that can be implemented and verified within the different business units. The internal auditors will check the existence of these manuals and review their content and application by the management. In addition internal audit will review that they are appropriately updated and that they have been clearly communicated to staff at all levels.