Skip to main content

7.4. Operational Risk

Effective from Nov 23 2011 - Nov 22 2011
To view other versions open the versions tab on the right

Operational risk is the risk of loss resulting from both internal and external operational events including e.g. technology failures, business disruption and system failures, breaches in internal controls, frauds, or other operational problems that may result in unexpected losses for the bank. The banks should systematically track and record frequency, severity and other information on operational loss events to provide a meaningful information for assessing the bank’s exposure to operational risk and developing a policy to mitigate / control that risk.

Banks should develop stress scenarios for operational risk stress tests based on the data of their past operational loss events and using professional judgment. The assumptions for operational risk stress tests would be different from those used in credit and market risk stress tests, and should be based on historical and plausible hypothetical operational loss events. A plausible stress scenario may assume a major business disruption or system failure (e.g. due to hardware or software failure or telecommunication problems) and assesses the effects of such disruptions /failures on the earnings and capital of the bank. Any additional capital requirements emanating from the outcome of operational risk stress tests should be taken into account in the capital planning process.