HKMA SPM Operational Risk + Resilience + Recovery + Outsourcing modules. OR OPERATIONAL RISK MANAGEMENT: (1) OR-1 Operational Risk Management - sound operational risk governance + risk identification + assessment + mitigation + monitoring + reporting + RCSA + loss event management + Basel III operational risk capital (SMA standardised measurement approach implementation); (2) OR-2 Operational Resilience - HKMA Operational Resilience Framework + Important Business Services + Impact Tolerances + Mapping + Testing + Self-Assessment; aligned with FSB Operational Resilience Principles + UK PRA + FCA approach + APRA CPS 230; effective 2022 + phased + sectoral exercises. RR RECOVERY + RESOLUTION PLANNING: RR-1 Recovery Planning - sound recovery plans + governance + governance + scenarios + recovery options + triggers + assessment + HKMA review; Financial Institutions (Resolution) Ordinance (FIRO) implementation + resolution planning + sectoral coordination + cross-border. SA OUTSOURCING: (a) SA-2 Outsourcing - sound outsourcing risk management + materiality + due diligence + contract + ongoing monitoring + concentration + business continuity + termination + Cloud + sub-contractor risk; coordinates with TM-G-4 (Public Cloud, separately tracked); FSB outsourcing principles + APRA CPS 234 alignment. OPERATIONAL RESILIENCE INTEGRATION: HKMA OR-2 + Recovery + Outsourcing + Technology Management + Cybersecurity + Business Continuity all integrate into holistic operational + cyber resilience framework.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.