Under CBUAE guidance, a bank's risk governance framework must ensure that:
-
A
The Board sets and oversees risk appetite and that risk culture is embedded throughout the organisation
-
B
Risk management is the exclusive responsibility of the CRO
-
C
Risk limits are set by the front office in consultation with the Board
-
D
External consultants validate all risk policies annually