206. Competent authorities should focus the assessment of operational risk sub-categories to those …

Competent authorities should focus the assessment of operational risk sub-categories to those which are considered material to the institution. Competent authorities should also apply their expert judgement to identify significant sub-categories, based on all available internal and external information sources. In conducting the assessment, competent authorities should always pay attention to the following aspects of operational risk⁴¹ :

• a. legal risk;
• b. model risk;
• c. ICT risk.

6.4.2.1. Legal risk

⁴¹ Please refer to Annex III for a non-exhaustive breakdown of operational risk sub-categories.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

3. Related Standards

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/