Short-Term Insurance Act, 1998 (Act No. 53 of 1998)

The operational risk management policy must set out the approach to the identification, assessment, monitoring, management and reporting of relevant operational risk exposures (including the risks associated with inadequate or failed internal processes, people or systems, or from external events).