CRO responsibilities
ORACLES
O Ongoing policy development
R Reporting (internally and externally)
A Allocate economic capital across firm
C Communication betwene stakeholders
L Leadership
E ERM framework
S System development
Risk management function (RMF) structures:
*Should incorprate CRF
Offence vs Defense
Policy & Policing
Partnership
Three Step Risk Management Process
1) Risk awareness - Tone from above, common taxonomy, training, compensation
2) Risk measurement (report) - Losses, incidents, KRIs
3) Risk control - Selective growth, risk adjusted pricing, enforce limits