The framework follows the three lines of defence model, provides an overview of CIBC’s organizational and governance structure, and highlights the Risk Appetite Statement (RAS), risk policies and limits, risk identification, reporting, and stress testing frameworks.