FIN-FSA Updates Rules and Guidelines on Management of Operational Risk
FIN-FSA updated the "Regulations and guidelines 8/2014" on management of operational risk by supervised entities. The Regulations and guidelines 8/2014 will enter into force on January 01, 2020. These regulations and guidelines concern the principles and organization of operational risk management, covering the topics of process management, staff, information and payment systems, information security, continuity planning, and legal risk. Among others, the updates have been made in incident reporting concerning network and information security breaches and fraud reporting concerning payment services.
The objective of these regulations and guidelines is to ensure that the following steps are taken:
- The supervised entity organizes its operational risk management to fulfill requirements determined by the scope and character of its operations.
- If necessary, the risk management tasks may be outsourced in compliance with the FIN-FSA regulations and guidelines 1/2012 on outsourcing.
- The supervised entity ensures an appropriate level of information management, information security, and continuity of operations.
- FIN-FSA is informed of significant disruptions and faults in the entity's operations and other impairments as well as losses due to realizations of operational risk.
The amendments to the regulations and guidelines are due to Directive 2016/1148 on security of network and information systems (NIS), Article 96(6) of the reformed Payment Systems Directive (PSD2) (EU) 2015/2366, Article 33(6) of Regulation (EU) 2018/389, Guidelines of EBA on fraud reporting (EBA/GL/2018/05), and on the conditions to benefit from an exemption from the contingency mechanism under PSD2 (EBA/GL/2018/07). Through these amendments, FIN-FSA provides more specific regulations and guidelines for incident reporting under the NIS Directive. The regulations and guidelines also communicate to supervised entities certain EBA guidelines which should be taken into account by the supervised entities in their activities.
Related Links
Effective Date: January 01, 2020
Keywords: Europe, Finland, Banking, Operational Risk, Outsourcing, EBA, FIN-FSA
Related Articles
BCBS Consults on Principles for Operational Risk and Resilience
BCBS is consulting on the principles for operational resilience and the revisions to the principles for sound management of operational risk for banks.
FSI Note Discusses Challenges Associated with COVID Relief Measures
The Financial Stability Institute (FSI) of BIS published a brief note that examines the supervisory challenges associated with certain temporary regulatory relief measures introduced by BCBS and prudential authorities in response to the COVID-19 pandemic.
HKMA Announces Repayment Deferment Under Payment Holiday Scheme
HKMA, together with the Banking Sector Small and Medium-Size Enterprise (SME) Lending Coordination Mechanism, announced a ninety-day repayment deferment for trade facilities under the Pre-approved Principal Payment Holiday Scheme.
ESRB Paper Presents Alternative Approach to EBA Stress Test Proposal
The Advisory Scientific Committee of ESRB published a response, in the form of an Insights Paper, to the EBA proposals for reforms to the stress testing framework in EU.
MAS Announces Key Initiatives to Support Adoption of SORA
MAS announced several initiatives to support adoption of the Singapore Overnight Rate Average (SORA), which is administered by MAS.
BoE Updates Template and Definitions for Form ER
BoE updated the reporting template for Form ER as well as the Form ER definitions, which contain guidance on the methodology to be used in calculating annualized interest rates.
PRA to Extend Temporary High Balance Coverage Amid COVID Crisis
PRA published the policy statement PS19/20 on the final policy for extending coverage under the Financial Services Compensation Scheme (FSCS) for Temporary High Balance.
EBA Publishes Standards on Disclosure and Reporting of MREL and TLAC
EBA published the final draft implementing technical standards for disclosures and reporting on the minimum requirements for own funds and eligible liabilities (MREL) and the total loss-absorbing capacity (TLAC) requirements in EU.
EBA Releases Erratum for Phase 2 Package on Reporting Framework 2.10
EBA published an erratum for the phase 2 of technical package on the reporting framework 2.10.
EC Sets Out Updated Technical Information for Solvency II Calculations
EC published the Implementing Regulation 2020/1145, which lays down technical information for calculation of technical provisions and basic own funds.
