Under the revised framework, banks will be required to establish clearly defined and independent Risk Management, Compliance and Internal Audit functions, each headed by a Chief Risk Officer (CRO), Chief Compliance Officer (CCO) and Head of Internal Audit (HIA), respectively.