Across
- 3. Key controls must be identifed and implemented for all inherent risks assessed as Significant and _____________ as part of Risk and Control Assessment
- 7. Accidental and intentional disclosure of confidential information IS governed by ____________________ prevention policy (dlp)
- 8. GNEP refers to Group ________________ Event Process that provides steps to be taken when an Event is discovered with adverse impact
- 11. An ___________________ to policy in action management means a policy non-complince where no further action is being taken.
- 13. Control ________________ Certification (CEC) is an internal half-yearly confirmation of the Adequacy and Effectiveness of the Control Framework
- 14. The risk appetite within which to manage risks IS OWNED AND MANAGED BY ________________ LINE of defence
Down
- 1. Issues are classified using the _______________ Classification matrix to quantify the extent to which the control gap or weakness contributes to overall risk exposure.
- 2. Financial Risk Impact where Actual / Potential impact on Financial Performance between GBP 1 M and 10 M is classifed as ____________________
- 4. Business ________________ Risk is a Risk that we will be unable to prevent, detect, respond or recover adequately from disruptive / impactful events
- 5. A control is an activity undertaken as part of a process, which is intentionally designed to ________________ a risk
- 6. Risk and Control ________________ is an end to end methodology used to systematically identify, measure and control operational and conduct risks across the bank
- 9. Risk ________________ expresses the level & types of Operational Risk the bank is willing to accept to achieve its strategic objectives & business plans
- 10. The full form of EAR is Event _________________ Report
- 12. Control ________________ Testing determines how well the control has been designed to mitigate the identified cuases of risk