According to guidelines issued by Basel Committee on Banking Supervision relating to corporate governance principles...

The board of directors should be responsible for overseeing the management of the bank's compliance risk but not involved in establishing a compliance policy that explains the processes by which compliance risks are to be identified and managed throughout the organization.

The board of directors should establish a compliance function and approve the bank's policies for identifying, assessing, monitoring, reporting, and advising on compliance risk.

The compliance function must have sufficient authority, stature, independence, and resources to be effective on its own and should not have access to the board of directors.

The compliance function should report directly to the CEO concerning the bank's compliance with applicable laws, rules, and standards and only update the board of directors on the bank's efforts in managing compliance risk when required.