In the context of managing operational risk within a bank, the CEO has reported on various actions and principles implemented to align with regulatory requirements. Which of the following actions and principles are consistent with the bank's operational risk management framework and comply with the governance guidelines set forth by Basel II and Basel III for operational risk?