I have been hearing that there are sample Compliance Risk Assessment Models available. Can someone tell me where I can locate a policy for this? or is someone willing to share their policy or how they were able to come up with it?

Thanks.

PM me with your email address and ask for the compliance risk assessment. I last updated mine in Dec 2010. I shows the law or regulation; cite; summary of reg; industry inherent risk; direction of risk; our policies, procedures and controls to mitigate the risk; bank level of risk; control strength; residual risk; and audit history.