BCBS Consults on Principles for Operational Risk and Resilience
BCBS is consulting on the principles for operational resilience and the revisions to the principles for sound management of operational risk for banks. COVID-19 pandemic has raised the importance of operational resilience and mitigating operational risk. The operational resilience principles aim to increase the capacity of banks to withstand disruptions due to potentially severe events while the updated principles on operational risk focus on change management and information and communication technologies (ICT). Comment period for both the consultations ends on November 06, 2020.
The principles for sound management of operational risk have been revised post the 2014 BCBS review of the implementation of the principles. The review indicated that several principles had not been adequately implemented and that the principles did not sufficiently capture certain important sources of operational risk. Thus, BCBS is proposing a limited number of updates to:
- Align the principles with the recently finalized Basel III operational risk framework
- Update the guidance, where needed, in the areas of change management and information and communication technologies
- Enhance the overall clarity of the principles
In another associated consultation, BCBS is proposing a pragmatic, principles-based approach to operational resilience that will help to ensure proportional implementation across banks of various size, complexity, and geographical location. The proposed principles for operational resilience not only build on the proposed updates to the Principles for Sound Management of Operational Risk, but they are largely derived and adapted from the existing guidance on outsourcing, business continuity, and risk management-related guidance issued by BCBS or national supervisors over a number of years. The proposed operational resilience principles focus on governance, operational risk management, business continuity planning and testing, mapping interconnections and interdependencies, third-party dependency management, incident management, and resilient cyber security and ICT. As an essential element of operational resilience, internationally active banks should consider whether their operational resilience efforts are appropriately harmonized with the stated actions, organizational mappings, and definitions of critical functions and critical shared services contained in their recovery and resolution plans as specified in the FSB Recovery and Resolution Planning framework. The principles aim to strengthen the ability of banks to withstand operational risk-related events, which could cause significant operational failures or wide-scale disruptions in financial markets, such as pandemics, cyber incidents, technology failures, or natural disasters.
Related Links
Comment Due Date: November 06, 2020
Keywords: International, Banks, Basel, Operational Resilience, Systemic Risk, Cyber Risk, ICT Risk, Outsourcing Arrangements, Business Continuity, BCBS
Featured Experts
Dr. Samuel W. Malone
Sam leads the quantitative research team within the CreditEdge™ research group. In this role, he develops novel risk and forecasting solutions for financial institutions while providing thought leadership on related trends in global financial markets.
Related Articles
ESAs Publish Reporting Templates for Financial Conglomerates
ESAs published the final draft implementing technical standards on reporting of intra-group transactions and risk concentration of financial conglomerates subject to the supplementary supervision in EU.
EBA Publishes Report on Asset Encumbrance of Banks in EU
EBA published the annual report on asset encumbrance of banks in EU.
US Agencies Publish Updates for Call Reports, FFIEC 101, and FR Y-9C
FED updated the reporting form and instructions for the FR Y-9C report on consolidated financial statements for holding companies.
EBA Proposes Guidelines for Establishing Intermediate Parent Entities
EBA issued a consultation paper on the guidelines on monitoring of the threshold and other procedural aspects of the establishment of intermediate EU parent undertakings, or IPUs, as laid down in the Capital Requirements Directive.
EC Adopts Financial Reporting Changes Arising from Benchmark Reforms
EC published Regulation 2021/25 that addresses amendments related to the financial reporting consequences of replacement of the existing interest rate benchmarks with alternative reference rates.
BIS Bulletin Examines Key Elements of Policy Response to Cyber Risk
BIS published a bulletin, or a note, that examines the cyber threat landscape in the context of the pandemic and discusses policies to reduce risks to financial stability.
HMT Updates List of Post-Brexit Equivalence Decisions in UK
HM Treasury, also known as HMT, has updated the table containing the list of the equivalence decisions that came into effect in UK at the end of the transition period of its withdrawal from EU.
EBA Issues Erratum for Technical Package on Reporting Framework 3.0
EBA published an erratum for technical package on phase 1 of the reporting framework 3.0.
APRA Publishes FAQ on Measurement of Credit Risk Weighted Assets
APRA updated a frequently asked question (FAQ), for authorized deposit-taking institutions, on the measurement of credit risk weighted assets.
ECB Letter Sets Out Strategies to Address Issue of Nonperforming Loans
ECB published a letter from Andrea Enria, the Chair of the Supervisory Board of ECB, answering questions raised by the President of the Bundestag (the German federal parliament) on how ECB assesses the financial stability of the euro area in the context of the significant level of nonperforming loans.
