-
What's new
- All What's new
-
European
- What's new - All
- <hr>
- What's new - last 24 hrs
- What's new - last 7 days
- What's new - last 30 days
- <hr>
- New EU Legislation
- European Commission
- European Banking Authority
- European Securities and Markets Authority
- European Insurance and Occupational Pensions Authority
- <hr>
- Consultations and similar
- Commentaries
- <hr>
- Downloads and Exports
- Latest news by Topics
-
International
- What's new - All
- <hr>
- What's new - last 24 hrs
- What's new - last 7 days
- What's new - last 30 days
- <hr>
- Bank for International Settlements
- Basel Committee on Banking Supervision
- Egmont Group
- International Association of Insurance Supervisors
- International Monetary Fund
- <hr>
- Consultations and similar
- Commentaries
- <hr>
- Downloads and Exports
- Latest news by Topics
- Downloads and Exports
- Legislation
- Organisations
-
Commentaries
- Consultations
- Sanctioned regimes
- IFRSs
- Regulatory calendar
- Quicklinks
-
More
Table of Contents
Page Overview
Related
Document Overview
AI Summary of Article 323 Operational risk management framework
Institutions are required to establish a comprehensive operational risk management framework that integrates seamlessly into daily risk management activities. This framework must include well-defined responsibilities, regular assessment of operational risk exposures, independent operational risk management functions, and consistent reporting mechanisms to senior management.
Moreover, institutions must ensure compliance with established policies, undertake routine reviews of operational risk processes, and maintain transparent data flows. The European Banking Authority will draft regulatory technical standards by 10 January 2027 to clarify these obligations in line with the institution's complexity and size.
AI Disclaimer
Please note that AI-generated content should not be considered legal advice. Users are encouraged to consult with qualified professionals or legal advisors where specific legal guidance is required.
We are committed to transparency and responsible use of AI in a way that supports, but never replaces, human expertise.
If you have any questions or concerns about the use of AI on our platform, please feel free to contact us.
Article 323 Operational risk management framework
1. Institutions shall have in place:
(a) a well-documented assessment and management system for operational risk which is closely integrated into day-to-day risk management processes, forms an integral part of the process of monitoring and controlling the institution's operational risk profile, and for which clear responsibilities have been assigned; the assessment and management system for operational risk shall identify the institution's exposures to operational risk and track relevant operational risk data, including material loss data;
(b) an operational risk management function that is independent from the institution's business and operational units;
(c) a system of reporting to senior management that provides operational risk reports to relevant functions within the institution;
(d) a system of regular monitoring and reporting of operational risk exposures and loss experience, and procedures for taking appropriate corrective actions;