Risk Management
The Risk Management and Compliance Department is the second line of defence for the Central Bank of the UAE, responsible for the management and oversight of the financial risks and non-financial risks.
It Identifies, manages, and reports all financial and non-financial risks faced by all CBUAE functions. Its primary purpose is promoting awareness of risk management among CBUAE staff, and establishing a CBUAE risk-aware culture.
Financial Risk
Financial risk management aims to identify, mitigate, and manage exposure to various financial risks stemming from the CBUAE’s activities. Financial risks can be classified into three main categories:
Market risk, Credit risk and Liquidity risk.
Market risk is the potential for loss of value stemming from adverse changes in market rates or prices. Our exposure to market risk arises principally from the management of the nation’s foreign reserves. We have a market risk framework in place and operate prudently to mitigate market risk, taking into account expected returns, the external environment, and developments in our own balance sheet.
Credit risk is the potential for loss that could arise if a counterparty fails to meet its payments on time. The CBUAE has a credit risk framework in place, which outlines the limit-setting methodology, guidelines for the maintenance and monitoring of the exposure, and operating procedures for ensuring compliance and breach management. Consistent with widely- adopted approaches, we apply minimum standards for acceptable creditworthiness among counterparties and issuers, and use numerical limits to manage credit risk exposures.
Liquidity risk refers to the inability to buy or sell assets of a given size over a given period, without affecting the asset price adversely. Safeguarding the liquidity of foreign reserves is a core objective of the CBUAE. To achieve this, we have a liquidity risk framework that defines the methodology and criteria for measuring liquidity risk, and which stipulates rules for compliance monitoring.
Operational Risk
Operational Risk Management is an independent second line of defence that falls within the umbrella of Risk Management Department.
A key mandate of the function is as follows:
- Design, maintenance and ongoing development of the Operational Risk Framework within the organisation.
- Facilitates and monitors the implementation of effective risk management practices, by assisting risk owners in defining the target risk exposure and reporting adequate risk-related information throughout the organisation.
- Developing and maintaining the operational risk management policies and procedures.
- Assist business areas in conducting risk and control self-assessments (RCSAs).
- Assist business areas in defining appropriate controls.
- Defining and monitoring Key Risk Indicators.
- Agreeing with business areas on risk mitigation plans and monitoring execution.
- Review and Challenge the reported/ known operational risks and issues that different department/ units reports across the CBUAE. Â Conduct an independent review and challenge of the Root Cause Analysis for Material/ significant incidents/ near-miss or issues.
- Reporting to Senior Management, Risk Committee and Board Risk Committee on operational risk.
- Conduct other risk assessment processes (ORAP) as requested.
- Co-ordinate with other RMCD sections to ensure the consistent management of non-financial risks.
- Conducts periodic reviews and control assurance to assess the effectiveness of the internal control environment.
Business Continuity
An independent second line of defence, which falls under the umbrella of Risk Management Department. The Business Continuity Function develops, implements, and manages the Business Continuity Management System (BCMS) across the CBUAE. The function is responsible for the overall readiness for potential disruptive scenarios that can affect normal functioning of business.
The key activities of the function are as follows:
-
Develops key Business Continuity policies, procedures, and plans in line with regulatory standards and drives the enforcement of the CBUAE Business Continuity policies and standards.
-
Performs and periodically maintains the Business Impact Analysis (BIA) and the business and technical requirements for recovery of each critical function.
-
Establishes and maintains corporate awareness about Business Continuity Management.
-
Promotes corporate awareness about Business Continuity Management and embeds a BCM culture within CBUAE.
-
Liaises with governmental bodies, regulators, international organisations and external parties on matters related to business continuity.
Compliance
An independent second line of defence, which falls under the umbrella of the Risk Management Department.
Information Security
An independent second line of defence, which falls under the umbrella of the Risk Management Department, involved in numerous national cyber-security programmes.
The Information Security function is responsible for developing and maintaining the information security policies of the organisation's information security management system. The function conducts periodic information security and cyber-risk assessments across various departments, to enhance the robustness of internal information security controls.
The function plays a critical role in liaising with other governmental bodies, regulators, international organisations and external parties on information security matters.
Cyber-Security Centre of Excellence
As part of our broader efforts to ensure cyber-security across the UAE, we maintain a sector-wide situational awareness. Â
Related Committees
Last updated on: Wednesday 25 October 2023
Total visitors 12293
Rate this page
Rated by 2 People
Thanks for rating