Principle (3) Preparation, Update, and Approval of Compliance Policy: Responsibilities, Sanctions, Monitoring, and Reporting on Compliance Risks
No: 42005223
Date(g): 15/9/2020 | Date(h): 28/1/1442
Status: In-Force
Translated Document
Effective from 2020-09-15 - Sep 14 2020 To view other versions open the versions tab on the right
The senior management of the bank is responsible for preparing, updating, and obtaining board approval for the compliance policy, and ensuring its dissemination. They must also ensure adherence to the policy and report on compliance risk management to the board.
Responsibility for Preparing, Updating, and Communicating the Compliance Policy
37-
The senior management of the bank is responsible for preparing and updating the compliance policy for managing compliance matters, obtaining board approval for local banks, and the branch head for foreign bank branches, and communicating it to all bank sectors. The policy should include:
The compliance principles that work units and their personnel must adhere to.
An explanation of the key procedures for identifying and managing compliance risks throughout all levels of the bank's system.
Enhancement of clarity and transparency by distinguishing between general standards applicable to all employees and specific standards and procedures that apply only to certain employee groups.
Responsibility for Adhering to the Compliance Policy, Taking Corrective Actions, and Applying Sanctions
38-
The senior management has the duty to ensure adherence to the compliance policy and to ensure that appropriate corrective and disciplinary actions are taken in case of policy violations.
Oversight and Reporting
39-
The senior management, with the assistance of the compliance unit, is responsible for:
Identifying the principal compliance risks facing the bank, developing plans to manage and assess these risks at least annually. These plans should address any deficiencies in the policy, procedures, or implementation related to the effectiveness of the existing compliance risk management, as well as determine the need for any additional policies or procedures to address new compliance risks identified in the annual compliance risk assessment.
Providing written reports to the board or its delegated committee, highlighting the bank's management of compliance risks at least once annually, to support board members in making informed decisions based on accurate information regarding the effectiveness of the bank’s compliance risk management.
Reporting in writing to the board or its delegated committee immediately about any significant failures, deficiencies, or violations of compliance (e.g., compliance failures that may result in significant risks leading to legal or regulatory penalties, severe financial losses, or damage to the bank’s reputation).
