Answer:
There is no official answer on length, but you have to cover customers, geography, transactions, products and services. Just a list of these is not enough. You have to drill down to the numbers and come up with inherent, mitigating and residual risk. You may find you need more than 20 pages.
-----------------------------
Learn more about Deborah Crawford’s webinar
New BSA Officer Training