斯里兰卡：中央银行风险管理技术援助报告（英）

IMF | Sri Lanka Central Bank Risk Management

Executive Summary

The Central Bank of Sri Lanka (CBSL) has made significant strides in improving its risk management function since 2015. The bank has a detailed risk governance framework, including a Risk Management Policy Statement (RMPS), and is working towards implementing an Enterprise Risk Management (ERM) framework. Key steps have included the establishment of the Board Risk Oversight Committee (BROC) and the Non-Financial Risk Management Committee (NFRMC).

However, the CBSL still faces some challenges in fully realizing the potential of these committees. The BROC and NFRMC are relatively new and require additional improvements in their current operations. The CBSL has laid a strong foundation for risk management, but there is room for further embedding the risk management function within the organization.

To enhance the effectiveness of risk management, the following recommendations are proposed:

1. Strengthening Tone at the Top: The CBSL should reinforce the commitment to risk management at the highest levels of the organization.
2. Risk Appetite Statement (RAS): The planned adoption of a top-down RAS will improve risk ownership across all levels of the organization.
3. Training and Awareness: Specific training programs, particularly at senior management levels, and effective communication and awareness actions are necessary.
4. Empowerment of Risk Management Function: The risk management function should be empowered to actively participate in monitoring the strategic plan and supporting strategic risk assessments (SRA).

These measures aim to further improve the CBSL's risk culture and decision-making processes, ensuring that the bank continues to fulfill its mandate effectively.

---

Key Points:

• Risk Governance Framework: Established RMPS and ongoing ERM implementation.
• New Committees: BROC and NFRMC.
• Challenges: Need for improvement in committee operations.
• Recommendations: Strengthening tone at the top, adopting RAS, training, and empowering the risk management function.

---

Note: The summary focuses on the main points and key recommendations without including unnecessary details.