Question 12

The board of directors should establish a compliance function and approve the bank's policies for identifying, assessing, monitoring, reporting, and advising on compliance risk.

The board of directors plays a critical role in establishing a robust compliance function within the bank. This includes approving comprehensive policies that guide the identification, assessment, monitoring, reporting, and advisory processes related to compliance risk.

A) The compliance function must have sufficient authority, stature, independence, and resources to be effective on its own and should not have access to the board of directors

This option is incorrect because the compliance function needs to have a direct line to the board of directors to ensure accountability and oversight. Limiting access undermines the board's ability to effectively oversee compliance risk.

B) The compliance function should report directly to the CEO concerning the bank's compliance with applicable laws, rules, and standards and only update the board of directors on the bank's efforts in managing compliance risk when required

This option is also incorrect. While the compliance function may report to the CEO, it is imperative for the board to be actively involved in compliance oversight rather than being updated only when necessary. Regular updates to the board ensure comprehensive governance.

C) The board of directors should be responsible for overseeing the management of the bank's compliance risk but not involved in establishing a compliance policy that explains the processes by which compliance risks are to be identified and managed throughout the organization

This statement is incorrect as it separates the oversight role from the establishment of compliance policies. The board should not only oversee compliance risk but also be directly involved in formulating the policies that dictate how those risks are managed.

D) The board of directors should establish a compliance function and approve the bank's policies for identifying, assessing, monitoring, reporting, and advising on compliance risk

This option is correct as it accurately reflects the guidelines set forth by the Basel Committee. The board must take an active role in establishing the compliance framework, ensuring that risks are adequately addressed throughout the organization.

Conclusion

The correct answer emphasizes the essential role of the board of directors in establishing a comprehensive compliance function and policies, which is critical for effective governance. Other options fail to recognize the necessity of direct involvement by the board in compliance risk management, thereby neglecting the framework required for robust corporate governance in banks.