Article 322 › 6

The qualifying standards relating to business environment and internal control factors are the following: (a) an institution's firm-wide risk assessment methodology shall capture key business environment and internal control factors that can change the institutions operational risk profile; (b) an institution shall justify the choice of each factor as a meaningful driver of risk, based on experience and involving the expert judgment of the affected business areas; (c) an institution shall be able to justify to competent authorities the sensitivity of risk estimates to changes in the factors and the relative weighting of the various factors. In addition to capturing changes in risk due to improvements in risk controls, an institution's risk measurement framework shall also capture potential increases in risk due to greater complexity of activities or increased business volume; (d) an institution shall document its risk measurement framework and shall subject it to independent review within the institution and by competent authorities. Over time, an institution shall validate and reassess the process and the outcomes through comparison to actual internal loss experience and relevant external data.

← 5 · All articles · 323 →

Source: EUR-Lex CELLAR · retrieved 2026-09-04