Operational risk ICAAP practice benchmark
- 20 February 2020
This ORX practice benchmark was carried out in response to the interest from our membership on how to best coordinate and govern the operational risk component of the Internal Capital Adequacy Assessment Process (ICAAP).
Find out how mature your ICAAP practice is
This study is part of ORX's practice benchmark series. Practice benchmarks enable you to see how mature your institution’s operational risk management practices are against the rest of the industry. All firms that take part receive a customised benchmark report showing where their practice sits against the other participants. This helps you easily identify what you're doing well and where you could improve.
Practice benchmarks aren’t only available to ORX members. All of our practice benchmarks are available for a one-off fee to non-members of ORX, with costs starting from as little as £2,000. If you're interested in finding out more, please contact Roland Kennett.
Download the free summary report
In addition to the individual benchmark reports produced for each participant, we also create a detailed report analysing the results of our findings on operational risk ICAAP practice as a whole. This report is available to all members of ORX (sign in required). From this report we've created a summary, including some of the study highlights, which you can download for free.
The practice benchmark showed that most firms are moving towards maturity, however there are four key areas where firms can strengthen their practice:
- Controls can use systems to improve efficiency
- Challenge session outcomes can be used as evidence
- Using stronger documentation leads to stronger linkages
- Clearer roles for senior leadership and the board can improve engagement
1. Controls can use systems to improve efficiency
One of the top challenges identified in the study was the amount of resource and the length of time ICAAP requires. The key controls that firms have in place are mostly manual and participants’ operational risk ICAAP processes could benefit from controls best practices and the increased use of systems.
2. Challenge session outcomes can be used as evidence
The typical challenge session requires engaging stakeholders from multiple disciplines to verify various scenarios and actively debate the details of each part of the submission. Documentation can help provide evidence of the outcomes of challenge sessions, in turn, speeding up approvals down the line.
3. Using stronger documentation leads to stronger linkages
The operational risk ICAAP shows linkages to other programmes. Using stronger documentation to reference other frameworks and risk types would improve the links between operational risk ICAAP and daily activities.
4. Clearer roles for senior leadership and the board can improve engagement
For many firms, engagement from senior leadership and the board is limited to being responsible for the process, although some firms do involve leadership in their challenge sessions and validation. Those institutions looking to deepen engagement may consider documenting and communicating the need for increased involvement from these areas at the outset of the process.
Could you improve the coordination and governance of ICAAP?
ICAAP is required in many banks, but how does the operational risk aspect of the process in your firm compare to the rest of the industry? The ICAAP governance and coordination practice benchmark helps you understand common industry practice around this process and helps you identify where your's differs.
To get a customised benchmark showing your practice compared to financial institutions that took part in the study, and to receive the full report analysing the findings from the survey, get in touch with Roland Kennett. You don't need to be a member of ORX to take part in a practice benchmark, and prices start from as little as £2,000.