Sunday 03 March 2024
Sunday 03 March 2024
CBUAE: "FATF" Announcement of UAE Completion of the Requirements is a Testament of Concerted National Efforts to Combat Money Laundering and Terrorism Financing
Press Release
Tuesday 06 February 2024
Tuesday 06 February 2024
CBUAE revokes the licence and registration of Smart and Secure Insurance Agent
Press Release
Monday 05 February 2024
Monday 05 February 2024
CBUAE launches the fifth cohort of the Executive Certificate for Risk-Based Supervision Professionals
Press Release
Wednesday 31 January 2024
Wednesday 31 January 2024
CBUAE Maintains the Base Rate at 5.40%
Press Release
Tuesday 30 January 2024
Tuesday 30 January 2024
CBUAE imposes a financial sanction of AED 1.2 million on an insurance company operating in the UAE
Press Release
Monday 29 January 2024
Monday 29 January 2024
Mansour bin Zayed witnesses UAE Central Bank's Golden Jubilee
Press Release
Tuesday 16 January 2024
Tuesday 16 January 2024
Summary Report - Monetary Banking Developments - November 2023
Press Release
Risk Management
The Risk Management and Compliance Department is the second line of defence for the Central Bank of the UAE, responsible for the management and oversight of the financial risks and non-financial risks.
It Identifies, manages, and reports all financial and non-financial risks faced by all CBUAE functions. Its primary purpose is promoting awareness of risk management among CBUAE staff, and establishing a CBUAE risk-aware culture.
Financial Risk
Financial risk management aims to identify, mitigate, and manage exposure to various financial risks stemming from the CBUAE’s activities. Financial risks can be classified into three main categories:
Market risk, Credit risk and Liquidity risk.
Market risk is the potential for loss of value stemming from adverse changes in market rates or prices. Our exposure to market risk arises principally from the management of the nation’s foreign reserves. We have a market risk framework in place and operate prudently to mitigate market risk, taking into account expected returns, the external environment, and developments in our own balance sheet.
Credit risk is the potential for loss that could arise if a counterparty fails to meet its payments on time. The CBUAE has a credit risk framework in place, which outlines the limit-setting methodology, guidelines for the maintenance and monitoring of the exposure, and operating procedures for ensuring compliance and breach management. Consistent with widely- adopted approaches, we apply minimum standards for acceptable creditworthiness among counterparties and issuers, and use numerical limits to manage credit risk exposures.
Liquidity risk refers to the inability to buy or sell assets of a given size over a given period, without affecting the asset price adversely. Safeguarding the liquidity of foreign reserves is a core objective of the CBUAE. To achieve this, we have a liquidity risk framework that defines the methodology and criteria for measuring liquidity risk, and which stipulates rules for compliance monitoring.
Operational Risk
Operational Risk Management is an independent second line of defence that falls within the umbrella of Risk Management Department.
A key mandate of the function is as follows:
- Design, maintenance and ongoing development of the Operational Risk Framework within the organisation.
- Facilitates and monitors the implementation of effective risk management practices, by assisting risk owners in defining the target risk exposure and reporting adequate risk-related information throughout the organisation.
- Developing and maintaining the operational risk management policies and procedures.
- Assist business areas in conducting risk and control self-assessments (RCSAs).
- Assist business areas in defining appropriate controls.
- Defining and monitoring Key Risk Indicators.
- Agreeing with business areas on risk mitigation plans and monitoring execution.
- Review and Challenge the reported/ known operational risks and issues that different department/ units reports across the CBUAE. Â Conduct an independent review and challenge of the Root Cause Analysis for Material/ significant incidents/ near-miss or issues.
- Reporting to Senior Management, Risk Committee and Board Risk Committee on operational risk.
- Conduct other risk assessment processes (ORAP) as requested.
- Co-ordinate with other RMCD sections to ensure the consistent management of non-financial risks.
- Conducts periodic reviews and control assurance to assess the effectiveness of the internal control environment.
Business Continuity
An independent second line of defence, which falls under the umbrella of Risk Management Department. The Business Continuity Function develops, implements, and manages the Business Continuity Management System (BCMS) across the CBUAE. The function is responsible for the overall readiness for potential disruptive scenarios that can affect normal functioning of business.
The key activities of the function are as follows:
-
Develops key Business Continuity policies, procedures, and plans in line with regulatory standards and drives the enforcement of the CBUAE Business Continuity policies and standards.
-
Performs and periodically maintains the Business Impact Analysis (BIA) and the business and technical requirements for recovery of each critical function.
-
Establishes and maintains corporate awareness about Business Continuity Management.
-
Promotes corporate awareness about Business Continuity Management and embeds a BCM culture within CBUAE.
-
Liaises with governmental bodies, regulators, international organisations and external parties on matters related to business continuity.
Compliance
An independent second line of defence, which falls under the umbrella of the Risk Management Department.
Information Security
An independent second line of defence, which falls under the umbrella of the Risk Management Department, involved in numerous national cyber-security programmes.
The Information Security function is responsible for developing and maintaining the information security policies of the organisation's information security management system. The function conducts periodic information security and cyber-risk assessments across various departments, to enhance the robustness of internal information security controls.
The function plays a critical role in liaising with other governmental bodies, regulators, international organisations and external parties on information security matters.
Cyber-Security Centre of Excellence
As part of our broader efforts to ensure cyber-security across the UAE, we maintain a sector-wide situational awareness. Â
Related Committees
Rate this page
Rated by People
Thanks for rating
Last updated on: Wednesday 25 October 2023
Total visitors 14588
Rate this page
Rated by 3 People
Thanks for rating