BAS September 2022 Presentations

MANAGEMENT

The management rating reflects the capability of the board and management, in their respective roles, to identify, measure, monitor, and control risks of an institution’s activities. To ensure safe, sound and efficient operation in compliance with applicable laws and regulations. Directors must provide clear guidance regarding risk exposure levels and ensure appropriate policies, procedures, and practices have been established; while senior management is responsible for the development and implementation of the aforementioned. Management’s practices should address risks associated with credit, market, operational, reputation, strategic, compliance, legal, liquidity, and other risks. Directors and management should demonstrate active oversight with processes that ensure an appropriate audit program, internal control environment and effective risk ‐ monitoring and management information systems. This rating reflects the board’s and management’s ability in relation to all aspects of banking operations. Management evaluation factors may include but are not limited to: Level and quality of board and management oversight and support of all institution activities ◊ Ability to plan and respond to arising risks ◊ Adequacy and conformance with internal policies and controls ◊ Accuracy, timeliness, and effectiveness of risk monitoring and management information systems ◊ Adequacy of audits and internal controls to promote effective operations and reliable reporting, safeguard assets, and ensure compliance with laws, regulations, and internal policies ◊ Responsiveness to audit and examination recommendations ◊ Management depth and succession ◊ Influence by dominate authority ◊ Reasonableness ofcompensation ◊ Willingness toserve bankingneedsof community ◊ Overall performance and risk profileof the institution

2

3

4

5

1

•Critically deficientasset ‐ quality or credit administrationpractices •Board andmanagement have not demonstrated willingnessor ability to correct problems and implement appropriate risk management practices •Risk exposure and problems are inadequatelyidentified andcontrolled •Imminent threat tothe institution'sviability •Board andmanagement replacement isrequired

•Deficient management and boardperformance •Risk management practices areinadequate •Level of problems and risk exposure isexcessive •Problems and risks are inadequately identified andcontrolled •Board andmanagement strengtheningor replacement may be necessary

•Satisfactoryperformance of board and management •Satisfactory risk managementpractices •Minor weaknesses;not material to the institution's safetyand soundness, are addressed •Significant risksand problems areeffectively identified, measured, monitored, and controlled

•Strong performanceby management and the board •Strong riskmanagement practices •Significant risksare consistentlyidentified, measured, monitored,

•Board and management's performance are inneed ofimprovement •Risk management practices are lessthan capabilities may be insufficient for the institution's riskprofile •Inadequateoversightof significant risks and problems satisfactory •Board and management's

andcontrolled •Promptly and

successfully address existing andpotential problems andrisks

21

22

22

11