Risk Management Framework

OCC maintains a Risk Management Framework, which provides a foundation to support and describe the risk management policies, procedures and systems that make up OCC’s risk management.  OCC utilizes the three lines of defense model, which is outlined within the Risk Management Framework to manage risk at OCC.  The Risk Management Framework is supported by other frameworks and policies to outline how OCC operates as it relates to the identification, monitoring and management of risks across the enterprise, including, but not limited to, OCC’s Corporate Risk Management Policy and Third-Party Risk Management Framework.

Risk Management Framework
Corporate Risk Management Policy
Third-Party Risk Management Framework
Your acceptance of all cookies will permit robust site functionality. If you don't allow cookies, some features and functionality of OCC's site may not operate as expected. If you do not choose either cookie setting for our site, or if you close this window, this message will continue to display on each page you visit. Cookie settings can be controlled in your Internet browser to automatically reject some forms of cookies. For more details on cookies this site uses, see our OCC Site Cookies page. In addition to using cookies, we retain other information, including your Internet Protocol (IP) address, for the purposes listed in the Privacy Policy. Do not accept analytic cookies Accept analytic cookies