RISK AND CONTROL SELF ASSESSMENT AND KEY RISK INDICATOR

RCSA is a structured process by which business units identify, assess, and evaluate operational risks and the effectiveness of existing controls in their activities. It enables proactive risk management by involving frontline staff in recognizing potential risk exposures.

Business units assess their own risks and controls independently.

The primary objective of RCSA is to identify inherent operational risks and assess the adequacy of controls, helping management understand the residual risk remaining after controls are applied. It promotes a risk-aware culture across the organization.

Breach signals risk level exceeding tolerance, triggering escalation to management.