Lot 1 — banking governance and operational risk/control management
The different specific assignments will cover (i) advisory, implementation, review, re-engineering projects, and (ii) testing relating to the services areas listed below:
— control framework methodology,
— operational risk management,
— control framework application solutions,
— control auditing,
— risk and control mapping,
— key risk indicators definition,
— best banking practices,
— regulatory and compliance,
— Sarbanes–Oxley,
— Basel/Capital Requirement Directive,
— control reporting (Statement on Standards for Attestation Engagements (SSAE) No 16 or previously SAS 70 type II),
— IT security, general controls and applications,
— ISO, CobiT, ITIL, Information Security Forum's standard of good practice.