d. Any legal,
regulatory or other requirements which may exist- for example, if the risk
could result in legal action against the bank, this risk may be a high
priority if the probability of occurrence is high, and
ØThe highest
priority should be given to those risks that are evaluated as being the least
acceptable. High priority risks should be given regular attention, review and
evaluation. Over time, specific risks and risk priorities will change, and a
bank will need to review and evaluate its prioritization process.
Risk Response and Control Activities