RBI has asked these UCBs to lay down a board-approved policy clearly spelling out its compliance philosophy, expectations on compliance culture, structure and role of the compliance function, the role of CCO, processes for identifying, assessing, monitoring, managing and reporting on compliance risk. The policy will be reviewed at least once a year, the central bank has directed.
RBI has also directed UCBs to conduct an annual compliance risk assessment in order to identify and assess major compliance risks faced by them and prepare a plan to manage the risks. It has mandated that the CCO cannot be given any responsibility which brings elements of conflict of interest, especially any role relating to business and the CCO cannot be a member of any committee which conflicts her/his role as CCO.