206. Competent authorities should focus the assessment of operational risk sub-categories to those …

Competent authorities should focus the assessment of operational risk sub-categories to those which are considered material to the institution. Competent authorities should also apply their expert judgement to identify significant sub-categories, based on all available internal and external information sources. In conducting the assessment, competent authorities should always pay attention to the following aspects of operational risk⁴¹ :

• a. legal risk;
• b. model risk;
• c. ICT risk.

6.4.2.1. Legal risk

⁴¹ Please refer to Annex III for a non-exhaustive breakdown of operational risk sub-categories.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Normes associées

2. Exigences identifiées

3. Normes associées

• EBA - Published by the European Banking Authority at https://www.eba.europa.eu/