Skip to main content

4.1 Risk Management

No: 000044021528 Date(g): 11/10/2022 | Date(h): 16/3/1444 Status: In-Force

Effective from Oct 11 2022 - Oct 10 2022
To view other versions open the versions tab on the right

Principle 
 
 
A Fraud Risk Management Framework should be defined, approved and implemented, and should be aligned with the Member Organisation’s enterprise risk management process. 
 
 
Control Requirements 
 
 
a.The Fraud Risk Management Framework should be defined, approved and implemented.
 
 
b.The effectiveness of the Fraud Risk Management Framework should be measured and periodically evaluated using Key Performance Indicators, including at a minimum the volume and value of fraud cases.
 
 
c.The Fraud Risk Management Framework should be aligned with the Member Organisation’s enterprise risk management process.
 
 
d.The Fraud Risk Management Framework should address at a minimum:
 
 
 1.Intelligence Monitoring.
 
 2.Fraud Risk Assessment.
 
 3.Fraud Risk Appetite.
 
 4.Key Risk Indicators (KRIs).
 
e.Fraud risk management activities should involve, but not be limited to, the following stakeholders:
 
 
 1.Business owners and users.
 
 2.Operational Risk.
 
 3.Counter-Fraud Department.
 
 4.Cyber and IT departments.
 
 5.HR.
 
 6.Digital Department.