Description
Enterprise risk management policy. Covers: purpose and goals; General Manager accountability; risk identification through a risk register; integration into operating procedures; proactive risk handling; annual staff review of the register; resourcing mitigation; mandatory training for high-risk activities; tracking mitigation actions; annual update and board approval; and risk categories relevant to Canadian CDFIs (credit, operational, financial, governance, compliance, reputational, climate and disaster).
