Summary of Risk Assessment

(Head Office Group/ Division)

Audit Areas Proposed Audit Cycle Aggregate Final Risk Plan-2019

Legal Division Once in Three year 3 Low No

Operations Group Yearly 9 High Yes
Aitmaad Islamic Banking Group Yearly 7 High Yes
Service Quality Division Yearly 7 High Yes
Asset Recovery Group Yearly 8 High Yes
Human Resource Management Group Yearly 8 High Yes
Compliance Group Yearly 7 High Yes
Logistic Support Group Yearly 9 High Yes
Commercial Retail Banking Group Yearly 9 High Yes
Treasury Capital Market Group Yearly 8 High Yes
International Banking Group Yearly 9 High Yes
Learning & Management Development Division Once in Three year 2 Low No
Secretary Board of Directors Office Once in Three year 2 Low No
President Secretariat Office Once in Three year 1 Low No
Payment & Service Digital Banking Group Yearly 9 High Yes
Risk Management Group (including CAD) Yearly 9 High Yes
Credit Management Group Yearly 7 High Yes
Information Technology Group Yearly 8 High Yes
Finnacial Control Group Yearly 7 High Yes
Investment Banking Group Yearly 7 High Yes
Corporate Banking Group Yearly 7 High Yes

Risk Categorized Months Proposed Audit Cycle

HIGH 1-12 months Yearly
MODERATE 16-24 month Two Years
LOW Above 36 months Three Years and above
 1 to 3 4 to 6

Low (L) Moderate (M)

Legal /
Technolo
Complia Reputati
Risk Type Credit Market Liquidity Fraud Operatio gy / Financial
Audit Areas nce onal Total Aggregate
(BPR &COSO) Risk Risk Risk Risk nal Risk System Risk
/Regulat Risk
Risk
ory Risk
1 2 3 4 5 6 7 8 9 10 11 12 13
Impact N/A 1 1 1 5 N/A N/A 6 N/A 14
Legal Division 3
Likelihood N/A 1 1 1 5 N/A N/A 6 N/A 14
Impact 9 9 10 10 10 9 8 10 7 82
Operations Group (Trade
9
Factory) Likelihood 8 8 10 10 10 7 7 10 8 78

Impact 10 10 10 5 5 10 10 5 5 70
Aitmaad Islamic Banking Group 7
Likelihood 10 10 10 5 5 5 10 5 5 65

Impact N/A 9 5 10 5 5 5 5 10 54
Service Quality Division 7
Likelihood N/A 8 5 5 5 5 10 5 10 53
Impact 10 5 10 10 10 5 10 5 N/A 65
Asset Recovery Group 8
Likelihood 10 5 5 10 10 5 10 5 N/A 60
Impact N/A N/A N/A 10 10 10 N/A 10 10 50
Human Resource Management
8
Group Likelihood N/A N/A N/A 10 10 10 N/A 10 10 50

Impact N/A 3 N/A 5 9 8 N/A 10 N/A 35

Compliance Group 7
Likelihood N/A 3 N/A 5 8 7 N/A 10 N/A 33

Impact N/A 7 9 10 10 9 9 10 10 74
Logistic Support Group 9
Likelihood N/A 7 8 10 10 10 8 10 10 73

Impact 10 10 10 10 10 10 10 5 N/A 75
Commercial Retail Banking
9
Group Likelihood 10 10 10 10 10 10 10 5 N/A 75

Impact 10 10 10 10 10 10 10 5 5 80
Treasury Capital Market Group 8
Likelihood 10 10 10 10 5 10 10 5 5 75

Impact 10 10 10 10 10 10 10 10 N/A 80
International Banking Group 9
 1 to 3 4 to 6

Low (L) Moderate (M)

Legal /
Technolo
Complia Reputati
Risk Type Credit Market Liquidity Fraud Operatio gy / Financial
Audit Areas nce onal Total Aggregate
(BPR &COSO) Risk Risk Risk Risk nal Risk System Risk
/Regulat Risk
Risk
ory Risk
1 2 3 4 5 6 7 8 9 10 11 12 13
International Banking Group 9
Likelihood 10 10 10 10 5 10 10 10 N/A 75

Impact N/A N/A N/A N/A N/A 1 N/A 1 5 7

Learning & Management
2
Development Division Likelihood N/A N/A N/A N/A N/A 1 N/A 1 5 7

Impact N/A N/A 1 N/A 1 1 N/A 5 N/A 8

Secretary Board of Directors
2
Office Likelihood N/A N/A 1 N/A 1 1 N/A 5 N/A 8

Impact N/A N/A N/A N/A 1 1 N/A 1 N/A 3

President Secretariat Office 1
Likelihood N/A N/A N/A N/A 1 1 N/A 1 N/A 3

Impact N/A 9 N/A 10 10 10 8 7 9 63

Payment & Service Digital
9
Banking Group Likelihood N/A 8 N/A 10 10 10 7 8 8 61

Impact 10 10 10 10 5 10 10 10 10 85
Risk Management Group
9
(including CAD) Likelihood 10 10 10 10 5 10 10 10 10 85

Impact 9 6 N/A 6 6 8 N/A 9 5 49

Credit Management Group 7
Likelihood 9 5 N/A 6 6 7 N/A 9 4 46
Impact N/A N/A N/A 8 9 10 N/A 9 N/A 36
Information Technology Group 8
Likelihood N/A N/A N/A 7 8 10 N/A 8 N/A 33
Impact N/A N/A 1 9 N/A 8 10 10 8 46
Finnacial Control Group 7
Likelihood N/A N/A 1 7 N/A 7 10 10 7 42
Impact 9 9 9 7 5 4 9 9 7 68
Investment Banking Group 7
Likelihood 8 8 9 7 4 4 8 8 8 64

Impact 9 7 8 9 6 4 8 9 9 69
Corporate Banking Group 7
 1 to 3 4 to 6

Low (L) Moderate (M)

Legal /
Technolo
Complia Reputati
Risk Type Credit Market Liquidity Fraud Operatio gy / Financial
Audit Areas nce onal Total Aggregate
(BPR &COSO) Risk Risk Risk Risk nal Risk System Risk
/Regulat Risk
Risk
ory Risk
1 2 3 4 5 6 7 8 9 10 11 12 13
Corporate Banking Group 7
Likelihood 8 8 7 9 5 5 9 8 7 66
 7 to10

High (H)

Final Risk

14

Low

High

High

High

High

High

High

High

High

High

High
 7 to10

High (H)

Final Risk

14
High

Low

Low

Low

High

High

High

High

High

High

High
 7 to10

High (H)

Final Risk

14
High