aims to prevent loss or

damage resulting from unavailability of timely information.

entails

a reactive approach to the management of operational risk.

forms

an integral part of operational risk and should be managed on an annual basis.

is

a top-down management process.