A framework used to analyse the firm’s operational risk profile. An RCSA provides a means to identify control gaps that threaten the achievement of defined business or process objectives and monitoring what management is actually doing to close these gaps.