OSFI E-13 — RCM Framework

Overview

Draft the enterprise-wide Regulatory Compliance Management (RCM) framework document for federally regulated financial institutions under OSFI Guideline E-13.

Getting Started

Add your source materials to the project workspace, then activate the OSFI E-13 — RCM Framework skill. The agent will guide you through the process step by step.

Example conversation

You: We need to document our RCM framework for OSFI E-13—structures, key controls, risk-based approach, and annual review.

Agent: I’ll draft the enterprise-wide RCM framework using the skill reference. I’ll include a definition of regulatory compliance risk, the risk-based approach (identify, risk-assess, communicate, manage, mitigate), key controls and independent oversight, proportionality to size and complexity, and the requirement for at least annual review with clear accountability. I’ll align it with OSFI E-13 expectations so the framework supports the CCO role, procedures, reporting, and monitoring.

Output excerpt

1. Definition of regulatory compliance risk — For the purposes of this framework, regulatory compliance risk is the risk of the FRFI’s potential non-conformance with laws, rules, regulations, and prescribed practices in any jurisdiction in which it operates. It does not include risk arising from non-conformance with ethical standards.

2. Risk-based approach — The framework enables the FRFI to apply a risk-based approach for identifying, risk-assessing, communicating, managing, and mitigating regulatory compliance risk. Appropriate resources are allocated to higher-risk areas. Information on regulatory requirements and business activities is kept current and updated when regulatory or business changes occur.

3. Key controls and review — Key controls include oversight by individuals or functions independent of the activities they oversee. The RCM framework is reviewed and updated at least annually to address improvement needs, new and changing regulatory compliance risk, new business activities, and changes to corporate structure. The review methodology holds individuals accountable for assigned duties.

Extension and validation

validate_rcm_framework — Validates the RCM framework document for required sections: definition of regulatory compliance risk, risk-based approach, key controls, and annual (or more frequent) review; proportionality; and independent oversight. Flags missing content or unfilled placeholders (e.g. [TODO], TBD). Run after drafting or updating the framework.