Experience 19 is coming! Join us in San Francisco to discover, think big and pave the road ahead... Experience 19 is coming!
Join us in San Francisco
Register Today

Risk Assessment and Management Policy Manual

The Consumer Financial Protection Bureau calls for mortgage bankers, lenders, servicers, and other industry participants to implement risk management mechanisms for compliance with consumer protection laws.

AllRegs' Risk Assessment and Management Policy Manual provides industry participants with a roadmap for implementing an effective risk management strategy that can be used to navigate business risks.  This guide explores various types of risk, identifies tools for establishing a risk appetite, and provides strategies for measuring risk. This policy also offers various tools used in risk assessment, including a Cybersecurity Assessment Tool.


AllRegs' comprehensive Risk Assessment and Management Policy Manual will save you development time and resources. The policy includes direction for policy governance; identification or risk types, aids in determining risk appetite for business operations, and provides guidance for measuring and monitoring risk within various business functions - spelled out clearly in an understandable format for everyone in your organization.

The following agencies and organizations require the implementation of this policy:

  • CFPB
  • Fannie Mae
  • Freddie Mac
  • Ginnie Mae
  • HUD


The Risk Assessment and Management Policy Manual features the following benefits:

  • Supports strong operational preparedness
  • Establishes staff training requirements
  • Defines roles and responsibilities
  • Helps meet regulatory and internal compliance requirements
  • Allows policy revisions to fit your business model
  • Delivered via email within one business day

Optional Services

Maintenance: Receive regular and ongoing industry updates to keep your policy within regulatory requirements.

Publishing: Publish your manual, including your company procedures, in AllRegs Online to complete your policy manual solution.

Contact your account manager for information regarding these optional services!

Policy Manual
Risk Assessment and Management
Section Title Priority Action
2.1 Internal Controls Mandatory Review Include or reference related procedures in this section.
3 Staff and Training Mandatory Review Include the means by which your organization provides and tracks required training.
4.2 Risk Management Committee Recommended Best Practice This policy calls for a risk management Committee. Consider adding to this section all of the job positions that comprise this committee
5 Identifying Risks Optional Enhancement This section identifies eight types of risks. Include any additional risks as applicable for your business.
7 Measuring Risk Optional Enhancement Consider expanding this section to address your process for annual assessment.
9 Operational Risk Assessment Optional Enhancement You may wish to expand on the standardized loan processes to mitigate operational risk and stalled progression.
13.2 Business Continuity Recommended Best Practice Refer here to your specific business continuity plans.
14.2 Contract Review Optional Enhancement Consider inserting or making direct reference to your contract review procedures.
15 Servicing Risk Assessment Optional Enhancement This chapter includes best practices relative to servicing and collection behaviors. This may be amended or deleted to fit your business requirements.
16 Implementing a Risk Management Strategy Recommended Best Practice Include here the maturity level of your risk management program.
17 Tools for Risk Management Optional Enhancement Tools for business use are provided and may be further customized.