107. Competent authorities should assess whether the institution has an appropriate internal control framework. This assessment should include, at least whether:
a. the institution has adequate written internal control policies in place and has implemented an internal control framework within the business units, other relevant units and within independent internal control functions;
b. there is a clear, transparent and documented decision-making process with a clear allocation of responsibilities for implementation of the internal control framework and its components;
c. there is an adequate segregation of duties and information barriers where necessary;
d. all independent internal control functions are effective and have appropriate and sufficient resources, authority and stature to fulfil their mission, and where necessary direct access to the management body in its supervisory function;
e. the internal control framework covers all areas of the institution, with a clear allocation of
…