-Identify and assess risks and controls (Risk and Control Self-Assessment) by ensuring that key operational units and processes, material risks and risk mitigates are identified

• -Perform/drive the risk identification and assessment in liaison with independent control Functions when needed, ensuring validation by the relevant management level and consistency with the defined risk tolerance. Contribute to the definition and follow-up of remediation plan if needed
• -Manage Procedures by ensuring that Group procedures requirements are implemented locally, complemented with local specificities (regulations, tools, organizations...). 
• -Identifyand propose calibration of procedures according to the outcome of the risk assessment and other risk events (HI, control results, external events, Audit missions)
• -Implement Controls and action plans: by defining and regularly updating the control plans according to the outcome of the risk assessment, regulations, other risk events (Historical Incidents, control results, external events, Audits). Perform and/or coordinate controls according to this control plan
• -Document findings,recommendationsand permanent control actions: Upon notification/receipt of reports, organize the follow-up of the findings and recommendations, either issued internally (e.g.IG supervision) or externally (external auditors, supervisors) and ensure that they are closed within due date
• -Manage historical incidents by alerting the management and the independent control functions if needed on key incidents
• -Collect incidents (including impacts measurement),reportand update in the incidents database, including suspected and attempted fraud cases
• -Analyze incidentsin a timely mannerand define, jointly with the relevant stakeholders, the correctives measures be implemented to mitigate risks
• -Follow-upthe implementation of remediation actions and the unfolding oflong termincidents. Perform controls on the incident collection process,in particularthe cross-check with other databases (accounting or other when existing) and the half-yearly attestation by the local management

• -Provide Management support and governance by active contribution (or organization) to any committee on Operational risks and Permanent Control committees
• -Alert and escalate to the relevant level ofmanagementany operational risk incident and/or any recurring weakness. Perform periodic and ad-hoc reporting to theappropriate levelof management as wellas toindependent control functions.