OSFI E-13 — RCM Roles

Overview

Draft documented RCM roles and mandates (CCO, Senior Management, Internal Audit) for federally regulated financial institutions under OSFI E-13.

Getting Started

Add your source materials to the project workspace, then activate the OSFI E-13 — RCM Roles skill. The agent will guide you through the process step by step.

Example conversation

You: We need to document our RCM roles—CCO mandate, reporting to the board, and Senior Management and Internal Audit responsibilities.

Agent: I’ll draft the RCM roles document using the skill reference. I’ll define the CCO mandate, unfettered access, and functional reporting line to the Board; the CCO’s responsibility to assess adequacy and effectiveness of day-to-day controls and to opine on compliance enterprise-wide; Senior Management’s oversight expectations; and the Internal Audit (or independent review) role, including validation of compliance oversight and reporting of significant findings. I’ll ensure all roles are clearly documented per OSFI E-13.

Output excerpt

Chief Compliance Officer — The CCO has a clearly defined and documented mandate and, for functional purposes, a direct reporting line to the Board. The CCO is responsible for assessing the adequacy of, adherence to, and effectiveness of the FRFI’s day-to-day controls and for opining on whether, based on independent monitoring and testing, the RCM controls are sufficiently robust to achieve compliance with applicable regulatory requirements enterprise-wide. The CCO has appropriate stature, authority, resources, and support and is independent from operational management.

Senior Management — Senior Management oversees the RCM framework and assures that the CCO has the appropriate stature, authority, resources, and independence; that key results and findings are reported and acted on in a timely manner; and that all staff understand and are held accountable for their compliance responsibilities.

Internal Audit — Internal Audit validates the adequacy, adherence, and effectiveness of compliance oversight on a rotational or regular, risk-based basis, including testing of both operational and independent oversight levels. Significant findings are reported to operational management, the CCO, and Senior Management.

Extension and validation

validate_rcm_roles — Validates the RCM roles document for CCO mandate and reporting line to the Board, Senior Management oversight, and Internal Audit (or independent review) role. Flags missing content or placeholders. Run after drafting or updating the roles document.