The ICAAP should be risk based, comprehensive, forward-looking and take into consideration a bank's strategic plans and external changes. Further, it should also be based on an adequate measurement and assessment processes.

The basis of the internal capital adequacy assessment process lies in the measurement of a bank's minimum capital requirements which is the product of the calculated assessment of credit risks, market risks and operational risks which take place within the scope of Pillar 1 and all relevant Pillar 2 risks. Additional capital may also be required as a result of stress testing results, additional infrastructure expenditures and human resource, i.e. hiring of senior level executives. The internal capital adequacy assessment process challenges banks that they must take a broader approach and perspective of assessing other risks. Also, included are circumstances which affect the bank's total risk profile and which the management must analyze and form conclusions on their effects on the total capital requirements.

In this respect materiality is an aspect, i.e. large risk exposure - large risk management requirement - large capital requirement, and vice versa. However, it is important to understand that all banks - large as well as small, complex and non-complex - must comply with SAMA requirements.