You are hired in the Operational Risk department (2nd Line of defense) and tasked to create a Risk and Control Self-Assessment program for one of the following companies: Truist Financial Corp – TFC (NYSE); Pacific Electric and Gas – PCG (NYSE); Amazon.com -AMZN (NASDAQ). Please choose one company from the previous three companies and answer the questions below.
To understand the nature and scale of the company’s business, you should review the company’s description and data on any financial data websites (Yahoo finance, Google finance etc.) and the Annual Report (10-K), which is usually available under the Investor relations menu on the company’s website. (The financial information will be useful to determine the severity scale).
1) What are Risk and Control Self Assessments (RCSAs)? How would you construct an RCSA program? Create a rating scale similar to Exhibit B. The company’s revenues can help determine the size of the severity buckets. (25 points)
(Tips: Define various terms including risk, inherent and residual risk ratings, controls, and Action plans. Decide if your firm would adopt a top down or bottom up approach and explain why this method was chosen. create scope and how frequently RCSAs should be performed etc.).
Note: Tips are not a comprehensive list of things you need to define. They are just ideas to start.
2) As you create the program please identify the roles and responsibilities of first and second line of defense with respect to the RCSA program that you design (These would normally be the contents of policy and/or procedures). (25 Points)
Sample Solution
The post Program Construction appeared first on homework handlers.