OCC Heightened Standards (12 CFR Part 30, Appendix D)
I. Introduction: scope, parent frameworks and independence structures – OCC Heightened Standards (12 CFR Part 30, Appendix D)

OCC Heightened Standards (12 CFR Part 30, Appendix D) I.E.7: I.E.7 Independence structure of independent risk management

Independent risk management (units responsible for identifying, measuring, monitoring or controlling aggregate risks) stays independent of front line units through a reporting structure in which the board or its risk committee reviews and approves the risk governance framework; each Chief Risk Executive (one level below the CEO) has unrestricted access to the board and its committees on risks and issues; the board or risk committee approves all decisions on appointing or removing Chief Risk Executives and their annual compensation and salary adjustment; and no front line unit executive oversees any independent risk management unit.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in I. Introduction: scope, parent frameworks and independence structures – OCC Heightened Standards (12 CFR Part 30, Appendix D)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll OCC Heightened Standards (12 CFR Part 30, Appendix D) controls