Risk management standards
Supervisory expectations for how a firm identifies, measures, monitors and controls its risks.
Overview
Supervisors set expectations for governance, risk appetite, three lines of defence, model risk, operational resilience and third-party risk. Some are formal guidelines; others emerge from examination findings.
It connects most directly to Supervisory expectation, Governance review and Vendor risk management.
Check the official sources below for legal scope, applicable dates and exceptions. This entry is an explanatory reference, not legal advice.
Why it matters
Weak risk management is one of the most common causes of supervisory findings.
Who it affects
Supervised firms across sectors.
Connections
The terms most closely tied to Risk management standards. Select one to open it.
What to do about it
- 1Tag every obligation with the layer it came from.
- 2Watch the faster-moving layers more closely.
- 3Trace each lower-layer obligation back to its source.
From requirement to evidence.
Risk management standards are mapped to controls owned across departments, so the dial shows coverage.
Request early access →