(3) Overall risk management processes, including adequacy of oversight by senior management and policies to identify, measure, monitor, and control ma­te­ri­al risks, including data protection and rep­u­ta­tion­al risks. (4) Compliance with the mortgage servicing requirements under the Real Estate Settlement Procedures Act of 1974 ( 12 U.S.C. 2601 et seq.) and the regulations implementing such Act (12 C.F.R. Part 1024