my Bingo

3. Key controls must be identifed and implemented for all inherent risks assessed as Significant and _____________ as part of Risk and Control Assessment
7. Accidental and intentional disclosure of confidential information IS governed by ____________________ prevention policy (dlp)
8. GNEP refers to Group ________________ Event Process that provides steps to be taken when an Event is discovered with adverse impact
11. An ___________________ to policy in action management means a policy non-complince where no further action is being taken.
13. Control ________________ Certification (CEC) is an internal half-yearly confirmation of the Adequacy and Effectiveness of the Control Framework
14. The risk appetite within which to manage risks IS OWNED AND MANAGED BY ________________ LINE of defence

1. Issues are classified using the _______________ Classification matrix to quantify the extent to which the control gap or weakness contributes to overall risk exposure.
2. Financial Risk Impact where Actual / Potential impact on Financial Performance between GBP 1 M and 10 M is classifed as ____________________
4. Business ________________ Risk is a Risk that we will be unable to prevent, detect, respond or recover adequately from disruptive / impactful events
5. A control is an activity undertaken as part of a process, which is intentionally designed to ________________ a risk
6. Risk and Control ________________ is an end to end methodology used to systematically identify, measure and control operational and conduct risks across the bank
9. Risk ________________ expresses the level & types of Operational Risk the bank is willing to accept to achieve its strategic objectives & business plans
10. The full form of EAR is Event _________________ Report
12. Control ________________ Testing determines how well the control has been designed to mitigate the identified cuases of risk