INMA 4.2.2 Risk management policy

An INMA firm's risk management policy must reflect the nature, scale and complexity of the firm's operations and must include:

(a) the kinds of risk mentioned in rule 4.2.1(2) and other kinds of risk that it has identified itself as exposed to;
(b) the firm's strategies, policies, procedures and processes to deal with those risks;
(c) the firm's assessment of whether its financial resources are adequate to address those risks;
(d) procedures for reporting on compliance with the policy to the firm's governing body and senior management, and for ensuring that the policy is embedded within the firm's decision-making;
(e) triggers and scope for reviewing the policy in the light of changed conditions and factors affecting the firm's risk appetite, risk profile, business activities and financial resources; and
(f) procedures for reporting the results of the reviews to the firm's governing body and senior management.
Derived from QFCRA RM/2014-4 (as from 1st January 2015).