253. Competent authorities should consider the following sources of inherent risk and, where …

Competent authorities should consider the following sources of inherent risk and, where relevant, focus the assessment on those aspects, which are considered the most significant for the investment firm:

• a. workplace safety;
• b. damage to physical assets;
• c. internal fraud;
• d. external fraud;
• e. ICT risks;
• f. conduct risk;
• g. regulatory, legal and fiscal risks;
• h. model risk, in relation to models used for business purposes;
• i. insufficient (both qualitative and quantitative) human and technical resources in key positions;
• j. reputational risk.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

3. Related Standards

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/