• What is your banks asset size? $34B
• Do you have a Risk Division and/or Chief Risk Officer? If yes, what departments are under that division or the CRO (e.g. compliance, internal audit, vendor management, BCP, information security)? yes and yes. compliance, risk, and corporate insurance report to CRO
• Do you have a Financial Crimes or AML division? If so, is that part of your compliance department or where is it in your structure? yes, part of BSA
• Do you have a separate fraud division or division that does preventative fraud work (e.g. fraud training, fraud interviews, freezing/shutting down accounts, etc.) or is that part of the AML/Financial Crimes division? Yes (enterprise fraud management, EFM), and with recent changes now reports up through BSA
• Where does credit card fraud alerts and Reg. E/ACH disputes live in your organization? EFM
• Where does physical security (e.g. alarm checks, robbery training, cameras, building access, etc.) live in your organization? Separate division for corporate/physical security
• Do you have Strategist or Officer who is in charge of ERM? If yes, can you please describe if they are more strategic (e.g. set policies, participates in strategic decisions, sets metrics, etc.) or more administrative/advisory (e.g. sets risk framework, works with management on completing their risk assessments, etc.)? Who does this person report to? reports to CRO
• Do you have a centralized or decentralized quality control division? If it is centralized who does it report it? If it is decentralized does each operating channel have a designated person or is it other duties as assigned? unclear what you mean by quality control, to broad
• Does your compliance division perform compliance risk assessments and regular compliance assessments or is that the responsibility of each division or first line area? formal review by compliance division

Thank you to anyone that can provide some information on this!

Hello - Looking for some information on risk management in regards to organization structure. The information I'm looking for includes:

• What is your banks asset size? About $200 billion
• Do you have a Risk Division and/or Chief Risk Officer? If yes, what departments are under that division or the CRO (e.g. compliance, internal audit, vendor management, BCP, information security)? Yes, we have a CRO. Credit, operational, compliance, ethics, financial crimes, trading, CRA
• Do you have a Financial Crimes or AML division? If so, is that part of your compliance department or where is it in your structure? Not in compliance, but also reports to CRO.
• Do you have a separate fraud division or division that does preventative fraud work (e.g. fraud training, fraud interviews, freezing/shutting down accounts, etc.) or is that part of the AML/Financial Crimes division? Fraud sits in first line of defense with oversight in Financial Crimes.
• Where does credit card fraud alerts and Reg. E/ACH disputes live in your organization? First line
• Where does physical security (e.g. alarm checks, robbery training, cameras, building access, etc.) live in your organization? Physical and information security report to COO.
• Do you have Strategist or Officer who is in charge of ERM? If yes, can you please describe if they are more strategic (e.g. set policies, participates in strategic decisions, sets metrics, etc.) or more administrative/advisory (e.g. sets risk framework, works with management on completing their risk assessments, etc.)? Who does this person report to? CRO is responsible for ERM. Policies, metrics, standards, risk appetite, effective challenge, oversight report to CRO. RCSA is in first line.
• Do you have a centralized or decentralized quality control division? If it is centralized who does it report it? If it is decentralized does each operating channel have a designated person or is it other duties as assigned? Each business unit is responsible for its QA/QC processes.
• Does your compliance division perform compliance risk assessments and regular compliance assessments or is that the responsibility of each division or first line area? RCSA is in first line. Effective challenge is in second line. Second line also performs its own monitoring and testing as part of oversight.

Thank you to anyone that can provide some information on this!