Bank of Portugal Notice 3/2020 and 2/2025

  • Assessment of the adequacy and effectiveness of the compliance function
  • Assessment of the adequacy and effectiveness of the risk management function
  • Independent evaluations to be carried out by an entity external to the Institution, as provided for in the Notice
    • Article 32.º, nº 8: independent evaluations of the adequacy and effectiveness of the internal audit function, to be carried out periodically, at least every five years
    • Article 30º, n.º 4: periodic independent evaluations of the conformity of the information flows set up within the institution 
    • Article 29º, nº 7: periodic independent assessments of the adequacy of the processes for obtaining, producing and processing information implemented in the institution, as well as the control mechanisms, which include the intervention of the internal control functions within the scope of their respective competences, with a view to ensuring that all the information produced by the institution is reliable, complete, consistent, complete, current, timely, accessible and granular.
    • Article 3º, n.º 2: periodic and independent assessments of the conduct and values of the institution, which also cover the conduct and values of the management body itself and its committees.
    • Article 3º, n.º 3: periodic and independent assessments of the conduct and values of the supervisory body, which may be carried out in conjunction with the assessments referred to in the above article.