毕博上海银行咨询Sime Bank Operational Risk Report.docVIP

SIME BANK BERHAD OPERATIONAL RISK REVIEW (Excluding Human Resources and Information Technology) November 1997 CONTENTS Page No I INTRODUCTION 1 II FINDINGS AND RECOMMENDATIONS 6 2.1 Overview 6 2.2 Operational Risk Management Framework 13 2.3 Customer Service 21 2.4 Policies and Procedures 31 2.5 Regulatory Compliance 37 New Project Co-ordination and Control 44 Corporate Image 50 2.8 Physical Security 55 2.9 Fraud 58 Appendix – Contents A - RISK PROFILE MAPS B - RISK REGISTERS C - OPERATIONAL RISK CATEGORIES AND DEFINITIONS D - GUIDE VALUES/LOSS PARAMETERS I INTRODUCTION 1.1 Overview The purpose of this report is to summarise our draft findings and recommendations from the operational risk review carried out within Sime Bank Berhad (“Bank”). This excludes our findings and recommendations on human resources and information technology which have been incorporated in separate reports given their importance to the Bank. Our approach to conducting the operational risk review has involved holding a series of workshops and interviews with senior management, business managers and branch managers in order to: identify the operational risks facing the Bank; evaluate the causes and consequences of the risks identified; assess the quality of controls to manage these risks in order to determine the overall severity of the risks; and develop action plans to address the major risks. The findings from the workshops and interviews have been aggregated for the purposes of this report. Detailed findings from our workshops and interviews are set out in the Appendix to this report. 1.2 Approach A summary of the project approach is set out in the diagram below: 1.3 Operational risk profile The findings from our review indicate that the Bank is exposed to a number of major operational risks. The risk profile map below reflects the severity of these risks after taking into account the effectiveness of existing controls. In summary, the major operational risks facing the Bank are a