Page 22 - SABN AR 2021
P. 22
Specialised cross-cutting risks
Compliance management
1
Develop and maintain
an appropriate Compliance Policy and framework.
2
Identify, assess and monitor
compliance with applicable regulatory requirements.
3
Promote a culture of compliance and ethics.
4
Report on compliance risks to the RMC and ARC.
The following specific efforts are applied to ensure compliance obligations are met:
Business continuity management
The SABN has adopted the Business Continuity Institute (BCI) Good Practice Guidelines that are based on the ISO 22301: Business Continuity Management System (BCMS) standard. The Business Continuity Management (BCM) Programme is supported by a strategy, policy, framework and annual cycle of technical activities. The BCM Committee is fully operational. One successful business continuity ICT recovery test was performed remotely during the 2020/21 financial year.
The RMCD, together with the ICT Department, liaises closely with the SARB’s Cyber and Information Security Unit which is responsible for ensuring the holistic governance and management of a cyber and information security programme.
Figure 1.1: BCI BCM life cylce
22
South African Bank Note Company (RF) Proprietary Limited
Annual Report 2021
Corporate governance statement
