5.5 Information on risk data, aggregation and IT systems

On risk data, aggregation and IT systems, competent authorities should ensure that they receive from institutions the following:

• a. description of the framework and process used to gather, store and aggregate risk data across various levels of an institution, including flow of data from subsidiaries to the group;
• b. description of data flow and data structure of risk data used for ICAAP and ILAAP;
• c. description of data checks applied for risk data used for ICAAP and ILAAP purposes;
• d. description of IT systems used to gather, store, aggregate and disseminate risk data used for ICAAP and ILAAP.