OCC Heightened Standards (12 CFR Part 30, Appendix D)
II. Standards for the risk governance framework – OCC Heightened Standards (12 CFR Part 30, Appendix D)

OCC Heightened Standards (12 CFR Part 30, Appendix D) II.C.3.(b): II.C.3.(b) Internal audit: Risk-based audit plan

Internal audit, which in addition to Appendix A should ensure the framework complies with the Guidelines and suits the bank's size, complexity and risk profile, should establish and adhere to an audit plan, periodically reviewed and updated, that reflects the risk profile, emerging risks and issues, sets audit frequencies, and requires evaluation of the adequacy of and compliance with front line and IRM policies, procedures and processes; significant plan changes go to the audit committee.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in II. Standards for the risk governance framework – OCC Heightened Standards (12 CFR Part 30, Appendix D)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll OCC Heightened Standards (12 CFR Part 30, Appendix D) controls