In the banking and financial sector, the primary responsibility for risk management in individual financial institutions lies with their executive management and boards of directors. This is supported by internal audit and compliance functions within the banks, and external auditors.
Legislators set rules, regulators define and implement the regulatory framework, and supervisors oversee firms’ behaviour, enforce this framework and enforce sanctions in the case of noncompliance.v Each plays a role in the system with its own responsibilities.