Purpose
Translate the CBCS computer-risk memorandum into a testable BCMS requirement for managing automation-related risks and core controls.
Normative
Bitkaya shall identify and manage computer risks affecting banking operations, including development risk, processing errors, business interruption, unauthorized disclosure, fraud and control weaknesses, through preventive, containment and audit controls.
Descriptive
This requirement captures the computer risk memorandum themes of development risk, errors, interruption, confidentiality breaches, fraud and the general classes of control and audit expected in the computer environment.
Source reference: Policy Memorandum: Management of Computer Risks.
Assurance Assertions
- Computer risks are assessed and classified.
- Preventive and containment controls are defined for material automation risks.
- Inspection and audit oversight exist for computer-related controls.
Relationships
- Source: SRC-IT-001 CBCS IT Governance, Security, Continuity and Testing Guidelines
- Policy: POL-IT-001 IT and Cybersecurity Manual
- Process: PRC-RSA-001 Resilience Systems and Assurance
- Procedure: PROC-IT-005 Manage Computer Risk and Control Environment
- Control: CTRL-IT-005 Ensure Computer Risk and Control Environment Is Maintained
- Systems: SYS-KYT-001 Crystal Intelligence Blockchain Analytics, SYS-IT-001 Odoo Automated Compliance Monitoring
- Publications: PUB-KYT-002 Crystal Intelligence Calibration and Change Record, PUB-IT-001 Automated Compliance Monitoring Controls in Odoo SOP, PUB-TRAIN-001 Compliance Framework Onboarding for New Employees, PUB-TRAIN-002 Compliance Department Training, PUB-TRAIN-005 IT Compliance Training, PUB-KYT-001 Odoo Pre-Trade and Post-Trade KYT Controls SOP, PUB-OTC-001 Bitkaya Principal OTC Service Flows Memo
Assurance
- Source verified: yes
- Implementation linked: yes
- Wording unambiguous: review
History
- 2026-07-26: Created from SRC-IT-001.
- 2026-07-26: Linked to the IT process, procedure and control set.
- 2026-07-26: Added the missing IT policy metadata mapping.