Operational Risk and Resilience

management architecture (RMA). This is the second compo-

nent of BRMF and is represented by the base of the pyramid,

symbolizing the relationship between the ORCA principles of

risk management and the risk management architecture on

which they depend. The architecture constitutes the resources

and infrastructure necessary to ensure the consistent applica-

tion of ORCA; it embodies an eight-point plan for enterprise-

wide risk management that includes a common language,

leadership, resources, technology, measuring, reporting and

organizations.

‘… risk is inherent in business. Although the nature and

extent may differ, risk is as applicable to a small retailer ...