Operational Risk Management
-
-
-
-
-
-
-
-
-
-
(EXCHANGES - Collect External Data)
-
(SYNTHESIS & STEERING - Operational Risk Management Capability)
-
(EXCHANGES - Operational Risk Management Capability)
-
(BUSINESS - Operational Risk Management Capability)
-
(TRANSVERSAL MECANISMS - Operational Risk Management Capability)
-
(MASTER DATA MANAGEMENT - Operational Risk Management Capability)
-
(TRANSVERSAL MECANISMS - Traceability and audit trail)
-
(TRANSVERSAL MECANISMS - Authentication and juridiction)
-
(BUSINESS - Incident Management)
-
(BUSINESS - Permanent Control Management)
-
(BUSINESS - Regulators' Findings & Recommendations Management)
-
(BUSINESS - Operational Steering)
-
(BUSINESS - Risk Identification & Assessment)
-
(Risk Identification & Assessment - Identify Risks)
-
(Risk Identification & Assessment - Self Assessment)
-
(SYNTHESIS & STEERING - Define Operational Risk Norms and Framework)
-
(SYNTHESIS & STEERING - Centralize and Historize Operational Data)
-
(SYNTHESIS & STEERING - Measure Risk Exposure and Produce Risk Synthesis)
-
(SYNTHESIS & STEERING - Supervise Operational Risk Management and Permanent Control Framework)
-
(MASTER DATA MANAGEMENT - Management of Risk Taxonomy)
-
(MASTER DATA MANAGEMENT - Management of Common Processes)
-
(MASTER DATA MANAGEMENT - Management of Organizational Structures)
-
(Basel II Event Type - Event Type)
-
is of type
(Historical Incident - Event Type)
-
has one or many
(Historical Incident - Consequence Type)
-
has one or many
(Historical Incident - Cause Type)
-
impacts one or many
(Historical Incident - Organization)
-
is caused by a failing Process
(Historical Incident - Process)
-
feared event
(Operational Risk - Event Type)
-
potentially impacted Process
(Operational Risk - Process)
-
concerns
(Operational Risk - Organization)
-
drives definition of
(Risk Assessment - Permanent Control)
-
is potentially covered by
(Operational Risk - Permanent Control)
-
list of incidents for the Risk being assessed
(Risk Assessment - Historical Incident)
-
Customer/Supplier
(Risk Library Bounded Context - Junction)
-
Customer/Supplier
(Process Library Bounded Context - Junction)
-
Customer/Supplier
(Organization Proxy Bounded Context - Junction)
-
(Junction - Historical Incidents Bounded Context)
-
(Junction - Risk Assessment Bounded Context)
-
(Junction - Permanent Control Bounded Context)
-
Customer/Supplier
(Organization Proxy Bounded Context - Accounts & Profiles Management Bounded Context)
-
Customer/Supplier
(Accounts & Profiles Management Bounded Context - Junction)
-
Customer/Supplier
(Historical Incidents Bounded Context - Risk Assessment Bounded Context)
-
Customer/Supplier
(Permanent Control Bounded Context - Risk Assessment Bounded Context)
-
Conformist
(Historical Incidents Bounded Context - BI & Analytics Bounded Context)
-
Conformist
(Risk Assessment Bounded Context - BI & Analytics Bounded Context)
-
Conformist
(Permanent Control Bounded Context - BI & Analytics Bounded Context)
-
Conformist
(Organization Bounded Context - Organization Proxy Bounded Context)
-
Organisation
(Bank Organization Description & Management Application - BI & Analytics)
-
Organisation
(Organization Proxy - Accounts & Profiles Management)
-
User Profiles
(Accounts & Profiles Management - OPERATIONAL RISK - TRANSACTIONAL APPLICATIONS)
-
Organization
(Organization Proxy - OPERATIONAL RISK - TRANSACTIONAL APPLICATIONS)
-
Risk Taxonomy
(Risk Library - OPERATIONAL RISK - TRANSACTIONAL APPLICATIONS)
-
Organisation
(Bank Organization Description & Management Application - Organization Proxy)
-
User Profiles
(Accounts & Profiles Management - Risk Library)
-
Conformist
(Risk Library Bounded Context - BI & Analytics Bounded Context)
-
Conformist
(Process Library Bounded Context - BI & Analytics Bounded Context)
-
Conformist
(Organization Bounded Context - BI & Analytics Bounded Context)
-
Conformist
(Accounts & Profiles Management Bounded Context - BI & Analytics Bounded Context)
-
Process List
(Process Library - OPERATIONAL RISK - TRANSACTIONAL APPLICATIONS)
-
Customer/Supplier
(Accounts & Profiles Management Bounded Context - Process Library Bounded Context)
-
Customer/Supplier
(Accounts & Profiles Management Bounded Context - Risk Library Bounded Context)
-
User Profiles
(Accounts & Profiles Management - BI & Analytics)
-
User Profiles
(Accounts & Profiles Management - Process Library)
-
Historical Incidents
(Historical Incidents Application - Risk Assessment Application)
-
Controls Définition & Results
(Permanent Control Application - Risk Assessment Application)
-
Process List
(Process Library - BI & Analytics)
-
Risk Taxonomy
(Risk Library - BI & Analytics)
-
Controls
(Permanent Control Application - BI & Analytics)
-
Risk Assessment
(Risk Assessment Application - BI & Analytics)
-
Historical Incidents
(Historical Incidents Application - BI & Analytics)
-
(OPERATIONAL RISK - TRANSACTIONAL APPLICATIONS - Risk Assessment Application)
-
(OPERATIONAL RISK - TRANSACTIONAL APPLICATIONS - Permanent Control Application)
-
(OPERATIONAL RISK - TRANSACTIONAL APPLICATIONS - Historical Incidents Application)
-
(OPERATIONAL RISK - MASTER DATA - Process Library)
-
(OPERATIONAL RISK - MASTER DATA - Risk Library)
-
(OPERATIONAL RISK - MASTER DATA - Organization Proxy)
-
(OPERATIONAL RISK - MASTER DATA - Bank Organization Description & Management Application)
-
(OPERATIONAL RISK - MASTER DATA - Accounts & Profiles Management)
-
(all) Get Causes, Events, Conseq. from
(OPERATIONAL RISK - TRANSACTIONAL APPLICATIONS - Risk Library)
-
(all) Get list of Processes from
(OPERATIONAL RISK - TRANSACTIONAL APPLICATIONS - Process Library)
-
(all) Get User details & Roles from
(OPERATIONAL RISK - TRANSACTIONAL APPLICATIONS - Accounts & Profiles Management)
-
(all) Get Organization from
(OPERATIONAL RISK - TRANSACTIONAL APPLICATIONS - Organization Proxy)
-
Get Controls matching the Risk from
(Risk Assessment Application - Permanent Control Application)
-
Gets Incidents matching the Risk from
(Risk Assessment Application - Historical Incidents Application)
-
Sends Incidents to
(Historical Incidents Application - BI & Analytics)
-
Sends Assessments to
(Risk Assessment Application - BI & Analytics)
-
Sends Controls Plans & Results to
(Permanent Control Application - BI & Analytics)
-
Sends Organization as flat file to
(Bank Organization Description & Management Application - BI & Analytics)
-
Gets Organization from
(Accounts & Profiles Management - Organization Proxy)
-
Gets User details & Roles from
(Process Library - Accounts & Profiles Management)
-
Gets User details & Roles from
(Risk Library - Accounts & Profiles Management)
-
Sends Causes, Events, Conseq. to
(Risk Library - BI & Analytics)
-
Sends Processes to
(Process Library - BI & Analytics)
-
Sends User Profiles to
(Accounts & Profiles Management - BI & Analytics)
-
Sends Organization as flat file to
(Bank Organization Description & Management Application - Organization Proxy)
-
Creates and manages Incidents
(First Line of Defence - Historical Incidents Application)
-
Does a Self-Assessment
(First Line of Defence - Risk Assessment Application)
-
Defines Control Plan and keep track of their Execution
(First Line of Defence - Permanent Control Application)
-
Manages Risk Taxonomy
(Second Line of Defence - Risk Library)
-
Manages List of Processes
(Second Line of Defence - Process Library)
-
Manages User Profiles
(Risk Back Office Administrator - Accounts & Profiles Management)
-
Extract information and reports from
(First Line of Defence - BI & Analytics)
-
Extract information and reports from
(Second Line of Defence - BI & Analytics)
-
(First Line of Defence - Analyse processes, risks and incidents)
-
(Second Line of Defence - Analyse processes, risks and incidents)
-
(First Line of Defence - Identify risks at entity level)
-
(Second Line of Defence - Identify risks at group level)
-
(First Line of Defence - Ask for derogation)
-
(Second Line of Defence - Study derogation request)
-
(Analyse processes, risks and incidents - Identify risks at entity level)
-
(Analyse processes, risks and incidents - Identify risks at group level)
-
(Derogation Requested - Study derogation request)
-
(Identify risks at entity level - Ask for derogation)
-
(First Line of Defence - Assess and quantify risks)
-
(First Line of Defence - Propose action plan for high risks)
-
(First Line of Defence - Create or update synthesis of risks at entity level)
-
(Second Line of Defence - Check entity risk synthesis)
-
(Second Line of Defence - Check action plan)
-
(First Line of Defence - Implement needed actions)
-
reject
(Study derogation request - Identify risks at entity level)
-
(Identify risks at entity level - Assess and quantify risks)
-
(Assess and quantify risks - Create or update synthesis of risks at entity level)
-
(Create or update synthesis of risks at entity level - Check entity risk synthesis)
-
(Check entity risk synthesis - Propose action plan for high risks)
-
(Propose action plan for high risks - Check action plan)
-
(Check action plan - Implement needed actions)
-
(Second Line of Defence - Follow up action plan)
-
(Implement needed actions - Follow up action plan)
-
(First Line of Defence - Derogation Requested)
-
(Ask for derogation - Derogation Requested)
-
(Second Line of Defence - Derogation Accepted)
-
(Second Line of Defence - Derogation Refused)
-
(Ask for derogation - Study derogation request)
-
(Study derogation request - Derogation Accepted)
-
(Study derogation request - Derogation Refused)
-
(Derogation Refused - Define Operational Risk)
-
(First Line of Defence - Define Operational Risk)
-
(First Line of Defence - Operational Risk Defined)
-
(Identify risks at entity level - Define Operational Risk)
-
(Define Operational Risk - Operational Risk Defined)
-
(Operational Risk Defined - Risk Assessment Campain Started (September))
-
(First Line of Defence - Risk Assessment Campain Started (September))
-
(Risk Assessment Campain Started (September) - Assess and quantify risks)
-
(First Line of Defence - Operational Risk Assessed)
-
(First Line of Defence - Risk Synthesis Created or Updated)
-
(First Line of Defence - Action Plan Defined)
-
(First Line of Defence - Action Plan Updated)
-
(Second Line of Defence - Action Plan Confirmed)
-
(Second Line of Defence - Risk Synthesis Validated)
-
(Assess and quantify risks - Operational Risk Assessed)
-
(Operational Risk Assessed - Create or update synthesis of risks at entity level)
-
(Create or update synthesis of risks at entity level - Risk Synthesis Created or Updated)
-
(Risk Synthesis Created or Updated - Check entity risk synthesis)
-
(Check entity risk synthesis - Risk Synthesis Validated)
-
(Risk Synthesis Validated - Propose action plan for high risks)
-
(Propose action plan for high risks - Action Plan Defined)
-
(Action Plan Defined - Check action plan)
-
(Check action plan - Action Plan Confirmed)
-
(Action Plan Confirmed - Implement needed actions)
-
(Implement needed actions - Action Plan Updated)
-
(Action Plan Updated - Follow up action plan)
-
(Second Line of Defence - Risk Synthesis Not Validated)
-
(Check entity risk synthesis - Risk Synthesis Not Validated)
-
(Risk Synthesis Not Validated - Create or update synthesis of risks at entity level)
-
(Risk Assessment Application - Historical Incident)
-
(Risk Assessment Application - Organization)
-
(Risk Assessment Application - Event Type)
-
(Risk Assessment Application - Process)
-
(Risk Assessment Application - Operational Risk)
-
(Risk Assessment Application - Risk Assessment)
-
(Risk Assessment Application - Derogation)
-
is about
(Derogation - Event Type)
-
is bounded to
(Derogation - Organization)
-
(Risk Assessment Application - Assessment Campain)
-
(Risk Assessment Application - Risk Synthesis)
-
(Risk Assessment Application - Action Plan)
-
has yearly
(Operational Risk - Risk Assessment)
-
contains several
(Assessment Campain - Risk Assessment)
-
has one
(Assessment Campain - Risk Synthesis)
-
might have one
(Risk Assessment - Action Plan)
-
is about
(Derogation - Process)
-
(Risk Assessment Application - Business Features)
-
(Risk Assessment Application - Technical Features)
-
(Business Features - Derogation Management (creation to review))
-
(Technical Features - Audit Trail)
-
(Business Features - Risk Assessment Action Plan Management)
-
Reviews Assessments and Action Plan
(Second Line of Defence - Risk Assessment Application)
-
Gets User details & Roles from
(Risk Assessment Application - Accounts & Profiles Management)
-
Gets Organization from
(Risk Assessment Application - Organization Proxy)
-
Gets list of Processes from
(Risk Assessment Application - Process Library)
-
Gets Events from
(Risk Assessment Application - Risk Library)
-
(Risk Assessment Application - Risk Assessment UI)
-
(Risk Assessment Application - Risk Assessment GW)
-
(Risk Assessment Application - Risk Assessment Back)
-
makes API calls through
(Risk Assessment UI - Risk Assessment GW)
-
forwards API calls to
(Risk Assessment GW - Risk Assessment Back)
-
(Risk Assessment Application - Risk Assessment Database)
-
reads from & writes to
(Risk Assessment Back - Risk Assessment Database)
-
reads from & writes to
(Std Web App Back - Std Web App Database)
-
(Pattern: Standard Web Application - Std Web App Database)
-
(Pattern: Standard Web Application - Std Web App UI)
-
(Pattern: Standard Web Application - Std Web App GW)
-
makes API calls through
(Std Web App UI - Std Web App GW)
-
forwards API calls to
(Std Web App GW - Std Web App Back)
-
(Pattern: Standard Web Application - Std Web App Back)
-
(Tomcat (RA/BACK) - JAVA Application Service (RA/BACK))
-
https
(JAVA Application Service (RA/BACK) - Loadbalancing Service - Back VIP (RL))
-
(ORACLE (RA) - DataBase Service (RA))
-
https
(Browser - Loadbalancing Service - End-User VIP (RA))
-
(Tomcat (RA/GW) - JAVA Application Service (RA/GW))
-
(KAFKA (DataBackbone) - Messaging Service (DataBackbone))
-
http
(Reverse-proxy Service (RA/BACK) - JAVA Application Service (RA/BACK))
-
jdbc
(JAVA Application Service (RA/BACK) - DataBase Service (RA))
-
https
(JAVA Application Service (RA/GW) - Loadbalancing Service - Back VIP (RA))
-
(NGINX (RA/BACK) - Reverse-proxy Service (RA/BACK))
-
https
(JAVA Application Service (RA/BACK) - Loadbalancing Service - Back VIP (APM))
-
https
(Loadbalancing Service - End-User VIP (RA) - Reverse-proxy Service (RA/UI))
-
http
(Reverse-proxy Service (RA/UI) - JAVA Application Service (RA/GW))
-
https
(JAVA Application Service (RA/BACK) - Loadbalancing Service - Back VIP (PL))
-
http
(Reverse-proxy Service (RA/UI) - Web Hosting Service (RA/UI))
-
(Apache (RA/UI) - Web Hosting Service (RA/UI))
-
kafka
(JAVA Application Service (RA/BACK) - Messaging Service (DataBackbone))
-
(NGINX (RA/UI+GW) - Reverse-proxy Service (RA/UI))
-
https
(Loadbalancing Service - Back VIP (RA) - Reverse-proxy Service (RA/BACK))
-
(User Workstation - Browser)
-
(Presentation Zone (Risk Assessment) - Reverse-proxy Service (RA/UI))
-
(Presentation Zone (Risk Assessment) - JAVA Application Service (RA/GW))
-
(Presentation Zone (Risk Assessment) - Web Hosting Service (RA/UI))
-
(Trusted Zone (Risk Assessment) - JAVA Application Service (RA/BACK))
-
(Trusted Zone (Risk Assessment) - DataBase Service (RA))
-
(Trusted Zone (Risk Assessment) - Messaging Service (DataBackbone))
-
(Trusted Zone (Risk Assessment) - Reverse-proxy Service (RA/BACK))
-
https
(JAVA Application Service (RA/BACK) - Loadbalancing Service - Back VIP (OP))
-
https
(JAVA Application Service (RA/BACK) - Loadbalancing Service - Back VIP (PC))
-
https
(JAVA Application Service (RA/BACK) - Loadbalancing Service - Back VIP (HI))
-
(<LOADBALANCER> F5-001 - Loadbalancing Service - End-User VIP (RA))
-
(<VM> PDFRRAUI02 - Apache (RA/UI))
-
(<VM> PDFRRAUI02 - Tomcat (RA/GW))
-
(<VM> PDFRRAUI02 - NGINX (RA/UI+GW))
-
(<VM> PDFRRAUI01 - Apache (RA/UI))
-
(<VM> PDFRRAUI01 - Tomcat (RA/GW))
-
(<VM> PDFRRAUI01 - NGINX (RA/UI+GW))
-
https
(User Workstation - <LOADBALANCER> F5-001)
-
https
(<LOADBALANCER> F5-001 - <POOL> RA/UI)
-
https
(<LOADBALANCER> F5-002 - <POOL> RA/BACK)
-
(<LOADBALANCER> F5-002 - Loadbalancing Service - Back VIP (RA))
-
(<VM> PDFRRABACK02 - Tomcat (RA/BACK))
-
(<VM> PDFRRABACK02 - NGINX (RA/BACK))
-
(<POOL> RA/BACK - <VM> PDFRRABACK03)
-
(<VM> PDFRRABACK01 - Tomcat (RA/BACK))
-
(<VM> PDFRRABACK01 - NGINX (RA/BACK))
-
(<VM> PDFRRABACK03 - Tomcat (RA/BACK))
-
(<VM> PDFRRABACK03 - NGINX (RA/BACK))
-
(<POOL> RA/BACKDB - <VM> PDFRRABACKDB01)
-
(<POOL> RA/BACKDB - <VM> PDFRRABACKDB02)
-
(<VM> PDFRRABACKDB01 - ORACLE (RA))
-
(<VM> PDFRRABACKDB02 - ORACLE (RA))
-
https
(<POOL> RA/UI - <LOADBALANCER> F5-002)
-
jdbc
(<POOL> RA/BACK - <POOL> RA/BACKDB)
-
(<POOL> KAFKA - KAFKA (DataBackbone))
-
kafka
(<POOL> RA/BACK - <POOL> KAFKA)
-
(LAN a.a.a.a/b - <LOADBALANCER> F5-002)
-
(LAN a.a.a.a/b - <POOL> RA/BACK)
-
(LAN a.a.a.a/b - <POOL> RA/BACKDB)
-
(LAN a.a.a.a/b - <POOL> KAFKA)
-
(LAN x.x.x.x/y - <POOL> RA/UI)
-
(LAN x.x.x.x/y - <LOADBALANCER> F5-001)
-
(<POOL> RA/BACK - <VM> PDFRRABACK02)
-
(<POOL> RA/BACK - <VM> PDFRRABACK01)
-
(<POOL> RA/UI - <VM> PDFRRAUI01)
-
(<POOL> RA/UI - <VM> PDFRRAUI02)
-
(Operational Risk Management at Entity Level - Define and Deploy Organization, Methods and Tools at Entity Level)
-
(Operational Risk Management at Entity Level - Manage Incidents)
-
(Operational Risk Management at Entity Level - Identify, Assess and Manage Operational Risks)
-
(Operational Risk Management at Entity Level - Define, Execute and Follow Control Plans)
-
(Operational Risk Management at Entity Level - Calculate Impact on Capital and Report to Regulators)
-
(Operational Risk Management at Group Level - Define and Deploy Organization, Methods and Tools at Group Level. Check Conformity of Local Implementation and FIt for Purpose)
-
(Operational Risk Management at Group Level - Calculate Impact on Capital and Report to Regulators)
-
(Permanent Control Application - Permanent Control)
-
(Risk Library - Basel II Event Type)
-
(Risk Library - Event Type)
-
(Organization Proxy - Organization)
-
(Process Library - Process)
-
(Risk Library - Consequence Type)
-
(Historical Incidents Application - Historical Incident)
-
(Risk Assessment Application - Risk Assessment DataBase)
-
(ORACLE (RA) - Risk Assessment DataBase)
-
(Risk Assessment DataBase - Risk Assessment)
-
(Risk Library - Manage Group level taxonomies)
-
(Risk Library - Manage Entity level taxonomies)
-
(Risk Library - Request changes in taxonomies)
-
(Risk Library - Provide API-fied access to taxonomies)
-
(Manage Group level taxonomies - Second Line of Defence)
-
(Manage Entity level taxonomies - Second Line of Defence)
-
(Request changes in taxonomies - First Line of Defence)
-
(Provide API-fied access to taxonomies - OPERATIONAL RISK - TRANSACTIONAL APPLICATIONS)
-
Reject
(Submitted for validation - Under Investigation)
-
Validate
(Submitted for validation - Validated)
-
Reject the deletion
(Submitted for deletion - Under Investigation)
-
Reopen
(Validated - Under Investigation)
-
Delete
(Submitted for deletion - Deleted)
-
Submit for deletion
(Under Investigation - Submitted for deletion)
-
Submit for validation
(Under Investigation - Submitted for validation)
-
(Submitted for deletion - Historical Incident)
-
(Submitted for validation - Historical Incident)
-
(Deleted - Historical Incident)
-
(Validated - Historical Incident)
-
(Under Investigation - Historical Incident)
-
(BI & Analytics - Collect External Data)
-
(BI & Analytics - Traceability and audit trail)
-
(Historical Incidents Application - Incident Management)
-
(Risk Library - Management of Risk Taxonomy)
-
(SYNTHESIS & STEERING - Supervise Operational Risk Management and Permanent Control Framework)
-
(BUSINESS - Permanent Control Management)
-
(EXCHANGES - Collect External Data)
-
(Accounts & Profiles Management - Authentication and juridiction)
-
(BI & Analytics - Centralize and Historize Operational Data)
-
(SYNTHESIS & STEERING - Measure Risk Exposure and Produce Risk Synthesis)
-
(MASTER DATA MANAGEMENT - Management of Organizational Structures)
-
(BUSINESS - Risk Identification & Assessment)
-
(SYNTHESIS & STEERING - Define Operational Risk Norms and Framework)
-
(Bank Organization Description & Management Application - Management of Organizational Structures)
-
(BUSINESS - Operational Steering)
-
(BI & Analytics - Operational Steering)
-
(TRANSVERSAL MECANISMS - Operational Risk Management Capability)
-
(Permanent Control Application - Permanent Control Management)
-
(Organization Proxy - Management of Organizational Structures)
-
(MASTER DATA MANAGEMENT - Management of Common Processes)
-
(Process Library - Management of Common Processes)
-
(MASTER DATA MANAGEMENT - Operational Risk Management Capability)
-
(EXCHANGES - Operational Risk Management Capability)
-
(SYNTHESIS & STEERING - Operational Risk Management Capability)
-
(TRANSVERSAL MECANISMS - Authentication and juridiction)
-
(SYNTHESIS & STEERING - Centralize and Historize Operational Data)
-
(BI & Analytics - Measure Risk Exposure and Produce Risk Synthesis)
-
(Risk Assessment Application - Risk Identification & Assessment)
-
(BUSINESS - Operational Risk Management Capability)
-
(TRANSVERSAL MECANISMS - Traceability and audit trail)
-
(BUSINESS - Regulators' Findings & Recommendations Management)
-
(BUSINESS - Incident Management)
-
(MASTER DATA MANAGEMENT - Management of Risk Taxonomy)
-
(Derogation Refused - Identify risks at entity level)
-
(Identify risks at entity level - Operational Risk Defined)
-
(Risk Library - Cause Type)
-
- Strategic Architecture
- Tactical Architecture
- Program Level
- Product Level
- Risk Assessment
- Process & Event Storming
- Releases
- Application & Software Architecture
- Technology Architecture
- Risk Library
- Application & Software Architecture
- Historical Incidents
- Application & Software Architecture