Document ID: chunk:federal_register_of_legislation:F2019L01578:body:0:p3
Version: federal_register_of_legislation:F2019L01578
Segment Type: other
Provision Reference: 
Character Range: 5937–9277

that has a purpose other than superannuation[11], its risk management framework must cover all material contagion risks that any non-superannuation business conducted by the RSE licensee might have on the superannuation business.

Risk management framework
    14.         An RSE licensee's risk management framework must enable the RSE licensee to develop and implement strategies, policies, procedures and controls to appropriately manage different types of material risk.

    15.         An RSE licensee's risk management framework must provide reasonable assurance that each material risk to the RSE licensee's business operations is being prudently and soundly managed, having regard to the size, business mix and complexity of those operations.

    16.         An RSE licensee's risk management framework must, at a minimum, include:

       (a)          the risk appetite statement;

       (b)          the risk management strategy (RMS);

       (c)          a designated risk management function that meets the requirements of paragraph 24;

       (d)          all risk management policies, procedures and controls to identify, assess, monitor, report on, mitigate and manage each material risk;

       (e)          clearly defined and documented roles, responsibilities and formal reporting structures for the management of material risks throughout the RSE licensee's business operations;

       (f)           a management information system(s) (MIS) that is adequate, both under normal circumstances and in periods of stress, for measuring, assessing and reporting on all material risks across the RSE licensee's business operations; and

       (g)          a review process to ensure that the risk management framework remains effective.

    17.         Where an RSE licensee is part of a corporate group and any element of the RSE licensee's risk management framework is controlled or influenced by, or is subject to approval by another entity in the group, the RSE licensee's risk management framework must specifically take into account risks arising from group policy objectives and strategies, and clearly identify:

       (a)          whether the RSE licensee's risk management framework is derived wholly or partially from group risk management policies or functions;

       (b)          the linkages and significant differences between the RSE licensee's risk management framework and group risk management policies or functions; and

       (c)          the process for monitoring by, or reporting to, the group on risk management including the key procedures, the frequency of reporting and the approach to reviews.

Strategic and business planning[12]
    18.         An RSE licensee must identify and consider the material risks associated with the RSE licensee's strategic objectives and business plan, and must explicitly manage these risks through the risk management framework, including how changing these plans affects the risk profile of the RSE licensee's business operations.

Risk appetite statement
    19.         An RSE licensee must maintain an up-to-date risk appetite statement that covers the RSE licensee's business operations and each category of material risk. The risk appetite statement must be approved by the Board.

    20.         An RSE licensee's risk appetite