Quizizz Your Brain!

The Operational Risk Review Process is designed to help departments review and identify potential risks before implementation. Which of the following statement is false:

• A. Regulatory risk need not be considered as this is a document for assessing operational risk

• B. The Operational Risk Review Form must be approved prior to implementation of a new process

• C. Division Head approval is required only if the authority limits set is above the pre-established divisional limits

• D. All Operational Risk Reviews must be submitted to Risk & Prevention for review and sign-off

Which of the following risk is not operational risk?

• A. Transaction Processing Risk

• B. Market Risk

• C. Compliance Risk

• D. Legal Risk

For reportable operational risk event, we should inform ORM based on timeline from ____.

• A. Date of Discovery

• B. Date of Incident

• C. Date of Event

• D. Date of Financial Loss

The Group Compliance Risk Management Framework includes:

• A. Establish the context or shareholder risk management within Group

• B. Defines the governance structure and articulates the roles of various stakeholders in management compliance risk

• C. Defines the compliance risk acceptance process

• D. Defines the risk appetite in managing compliance risk

Which of the Sanctions Regulators are applicable under the Sanctions policy?

i. United Nations (“UN”) Security Council

ii. Monetary Authority of Singapore (“MAS”) and Singapore government agencies implementing UN Security Council Resolutions

iii. European Union (“EU”) Council

iv. US Treasury Department’s Office of Foreign Assets Control (“OFAC”)

• A. i, ii

• B. i, ii, iii

• C. ii, iii, iv

• D. All of the above

Which of the following is not an example of market manipulation?

• A. Insider Trading

• B. False Trading and Market Rigging

• C. Employment of manipulative and deceptive devices

• D. Price Monitoring

Full screening is NOT required for External Services Providers & Vendors (ESPV) Screening under the following scenarios?

• A. Entities that are regulated by an OCBC Approved Regulator

• B. Entities which under our approved vendor list

• C. Entities that are 100% owned by the government of countries (rated as Low or Medium Risk countries)

• D. Professional bodies (such as law firms & accounting firms)

For training requirements for external general manpower (e.g. pantry ladies, mailroom staff and scanning team), which are the courses and/or forms that need to be completed as part of the training requirements?

i. Banking Secrecy Declaration

ii. Fit & Proper Assessment Checklist

iii. Basic AML Module

• A. i & ii

• B. ii & iii

• C. none of the above

• D. all of the above

Whose approval for Data Patching is required before a Change request is raised?

• A. Head of IT

• B. Application Lead

• C. System Owner /or Data Patching Approval Matrix (alternate approvers)

• D. Data Patching R&P Matrix

I received a Web Content Screening (WCS) alert that I have uploaded an encrypted file onto a secured financial services website. What can I do as this upload is required for foreign regulatory reporting?

• A. Contact the foreign regulatory body to deliver the report in accordance with the Information Classification and Handling Guidelines

• B. Contact the foreign regulatory body and inform them that the Group cannot adhere to their request

• C. Seek approval from HOD and send email to TISO & TICR Departments to bypass the WCS as a one-off case