28. On risk data, aggregation and IT systems, competent authorities should ensure that they receive …

On risk data, aggregation and IT systems, competent authorities should ensure that they receive from institutions the following:

• a. description of the framework and process used to gather, store and aggregate risk data across various levels of an institution, including flow of data from subsidiaries to the group;
• b. description of data flow and data structure of risk data used for ICAAP and ILAAP;
• c. description of data checks applied for risk data used for ICAAP and ILAAP purposes;
• d. description of IT systems used to gather, store, aggregate and disseminate risk data used for ICAAP and ILAAP.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

3. Related Standards

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/