37. Competent authorities should determine the risk score predominantly through an assessment of …

Competent authorities should determine the risk score predominantly through an assessment of inherent risk, but they should also reflect considerations about risk management and controls. In particular, the adequacy of management and controls may reduce or – in some cases – increase the risk of significant prudential impact (i.e. considerations relating to inherent risk may underestimate or overestimate the level of risk depending on the adequacy of management and controls).

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

3. Related Standards

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/