247. As a minimum, competent authorities should consider the following: a. the business model and …

As a minimum, competent authorities should consider the following:

• a. the business model and risk appetite;
• b. in-house development or outsourcing of IT solutions;
• c. support functions such as compliance, legal, fiscal (also if outsourced);
• d. cost of lawsuits and litigation;
• e. total operational losses, including the cost of internal and external fraud;
• f. scope of non-trading book activities.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

3. Related Standards

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/